ffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) 21:45:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 21:45:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:45:17 executing program 4: pipe(&(0x7f00000004c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socket(0x40000000002, 0x3, 0x0) 21:45:17 executing program 2: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket(0x18, 0x1, 0x40) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000080)=""/63, 0x82}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x2002) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400000006) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100001080000000007000000000000006a4755a11f34958d53e69f96f8c43fba317cb0a0daf57bcc0851f601", @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c000700000000810000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 21:45:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 21:45:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8931, &(0x7f00000001c0)={'team0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) r7 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r8, 0x5, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "eddd4d212d1a7441", "7ab4daab80a58fe8450ae4ec3647bc24", "88df501a", "d17608ab52f05b2e"}, 0x28) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000040)={r8, 0x2, 0x9}) getrlimit(0x146933949d73eba7, 0x0) 21:45:17 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x300cce, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@multicast, @local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private}}}}}, 0x0) 21:45:18 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x300cce, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@multicast, @local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private}}}}}, 0x0) 21:45:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) mq_open(&(0x7f0000000040)='proc\x00', 0x80, 0x30, &(0x7f0000000080)={0x7f, 0x2, 0x6, 0x8000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:18 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x604, 0x0, 0x6f765f6f191b9a4) 21:45:18 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x300cce, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@multicast, @local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private}}}}}, 0x0) 21:45:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000072c8540301e63240b155bfdfcbdf"], &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x1f, 0x7ff}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r4, 0x5, 0x1, [0x8]}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) r5 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000840)={{0x0, 0x0, r6, r7, r6, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000040)=""/175) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SIOCGIFHWADDR(r10, 0x8927, &(0x7f0000000100)) [ 471.587207][T13339] netlink: 41503 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:19 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x300cce, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@multicast, @local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private}}}}}, 0x0) 21:45:19 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) eventfd(0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000200)="d6c824cc6345fc08d62efc54121cf7d8", 0x10) read(r2, &(0x7f0000000080)=""/105, 0x69) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 21:45:20 executing program 4: pipe(&(0x7f00000004c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socket(0x40000000002, 0x3, 0x0) 21:45:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'veth1_macvtap\x00', {}, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) rt_sigaction(0x0, &(0x7f0000000140)={&(0x7f0000000080)="64420f01de0f05f080a900800000f53e66420f38282caa660f381e750066470f2c1d00000000c4a3cd488fc26ed16700660f381cce3666460f3acebf0a0000000064f3410f12c2", 0x3, &(0x7f0000000100)="c4a11a11d926f20faef166440f3a62dca3f22e427500f2442929c401f9c5c2013643e0b645dfdac4e1035e1bc4e3c9cee300", {[0x9]}}, 0x0, 0x8, &(0x7f0000000180)) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:22 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000900)="ba", 0x20000901, 0x0, 0x0, 0x0) 21:45:22 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x604, 0x0, 0x6f765f6f191b9a4) 21:45:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000001a40)={"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"}) 21:45:22 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xa00000, 0x8, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9909d4, 0x3, [], @p_u16=&(0x7f00000000c0)=0x3}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, &(0x7f0000000240)=0x84) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8931, &(0x7f00000001c0)={'team0\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$CAPI_NCCI_OPENCOUNT(r10, 0x80044326, &(0x7f0000000380)=0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x2, 0x9, 0x820c, 0x100, 0x80000001, 0x9, 0xf200, 0x26, r5}, &(0x7f00000002c0)=0x20) getrlimit(0xd, 0x0) 21:45:22 executing program 4: pipe(&(0x7f00000004c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socket(0x40000000002, 0x3, 0x0) 21:45:22 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) [ 475.747095][T13382] netlink: 41503 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:45:23 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x604, 0x0, 0x6f765f6f191b9a4) 21:45:23 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {0x0}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x6, 0x0) 21:45:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x8, 0x80000001, 0xef}) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0x8) r5 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:24 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {0x0}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x6, 0x0) 21:45:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r7, 0x7, 0x1ff) r8 = syz_open_procfs(r7, &(0x7f0000000180)='fdinfo/3\x00') connect$bt_rfcomm(r8, &(0x7f0000000080)={0x1f, @none, 0x7f}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r10, r9, 0x0) r11 = dup3(r6, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:24 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x604, 0x0, 0x6f765f6f191b9a4) [ 477.362960][T13422] netlink: 41503 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a3128fdca31728bb506d575cbe7e1fc84f359a6e3e513cb3d6df7bbf7cc932fb0cc02cfadc5ca77f4ba1342d44f0fbbadeffbfd6009bc9f912a3047900e2df99ac98dcf1067c54716fd97cd370bd22faf4f7a48448f5404df1d07e03f3fa7d36d5ff5532b6cd108"], 0x5a) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0xfffffffffffff69b) 21:45:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:45:25 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 478.140168][T13435] mmap: syz-executor.2 (13435) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 21:45:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/89) r1 = dup3(r0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrlimit(0xa, 0x0) 21:45:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x78, &(0x7f0000000400)="94a4b04e04000000000000002b615ac5ee9a8f8cbeaf99cfc4dedd20494d4b895b5804ef58d7cee1761cd167fd6e40d0b1ebcc1e564cd165167d6872a0cdd716000000e1d60bef63eaef5d00001c5449c865576d0cfefa36566d4c68b24ec011e163f2040000007780d868116111aeed76c195ae235abe61"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:45:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {0x0}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x6, 0x0) 21:45:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8931, &(0x7f00000001c0)={'team0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002bbd7000fddbdf254400000008000d000000000008000c00ff010000080001000100000008000d002000000096002400882647095ea769904bab4f13876cb47dc779663de3d1138c497f9d46d202c5c654a2a598616d1468facc1237e0800913d316841b20147ad6a021ac113ce0e53bb06233a869002e4e00e317fe96a9d09dc996272a36c67d066603d68de9df0e4793f8ed0ec4ace302b41f3b8283698ab743b3a5153b532e5b694fa0220d90cc602d1eb9a49aab75b3a3567833dcf1def9d0eb000008000d004c6e000008000300", @ANYRES32=0x0, @ANYBLOB="0400bf00ac007000040007000500060000000000050008008100000005000800800000008600030008f46e7fda7c71fc4948d5e2ad9dfcd3cb845d8fcd22afcb4000eb229f4ce80208af4044cd9247f4f3e8c18aeafad5d0a3f3599d4877d32a33708d77e353e6cd085bb0517d54b5e3f00e43abc64ba28056dddcdb79fdd6cd2ac36aa1afbde4fdea5edd4224e5df5c48788cc6bc0268502b9c34ca4ee39c37dc7207dd237386523ff0000004000700"], 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x20040855) getrlimit(0x146933949d73eba7, 0x0) 21:45:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:45:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_MASK={0x8}]}, 0x38}}, 0x0) 21:45:26 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {0x0}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x6, 0x0) 21:45:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x121001, 0x22) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r3, 0x290c302a) keyctl$read(0xb, r3, &(0x7f0000000040)=""/13, 0xfffffffffffffd25) keyctl$describe(0x6, r3, &(0x7f0000000040)=""/9, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:26 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x2}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x4, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) close(r4) 21:45:26 executing program 5: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f00000000c0), &(0x7f0000000200)=""/86}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 21:45:26 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 21:45:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:45:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000080)=0x25) ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, 0x0) 21:45:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev}, 0x10) [ 479.891515][T13488] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 479.978228][T13488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.047048][T13502] device bond1 entered promiscuous mode 21:45:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$dsp(r5, &(0x7f0000000040)="ff8b976dac22207d3b4256382423743d1ec0c50c460f04b7dde2a4dac8b5d9425c14aff76aeb1054a50dbb6e4e705c342566e7f52ae6484ef4778485631a2e423e076c019b4b53ce95f6ca71de915f1873e23519", 0x54) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) [ 480.231952][T13486] device bond1 left promiscuous mode [ 480.285677][T13502] device bond1 entered promiscuous mode [ 480.292484][T13486] device bond1 left promiscuous mode 21:45:27 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 21:45:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x8302) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x200) getrlimit(0x146933949d73eba7, 0x0) 21:45:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14}], {0x14}}, 0xb8}}, 0x0) 21:45:27 executing program 4: r0 = socket(0x18, 0x0, 0x2) bind(r0, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000100), &(0x7f0000000000)=0x14) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x6, &(0x7f0000000100), 0x5b3048225bb3f999) 21:45:27 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r2, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 21:45:28 executing program 5: unshare(0x2000400) r0 = socket(0x80000000000000a, 0x2, 0x0) close(r0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:45:28 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 21:45:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 21:45:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r3, 0x7, 0x1ff) capset(&(0x7f0000000040)={0x19980330, r3}, &(0x7f0000000080)={0x5f38, 0xda35, 0x301, 0xff, 0x7fff, 0x2}) 21:45:28 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r2, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 21:45:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14}], {0x14}}, 0xb8}}, 0x0) [ 481.289358][T13557] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 21:45:28 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r2, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 21:45:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14}], {0x14}}, 0xb8}}, 0x0) 21:45:28 executing program 4: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:28 executing program 1: syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x80000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) [ 481.790023][ C1] sd 0:0:1:0: [sg0] tag#3326 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 481.800675][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB: Test Unit Ready [ 481.807483][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.817465][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.827336][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.837223][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.849270][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.859170][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.869063][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.878992][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.888875][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.898763][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.908652][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.918505][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.928383][ C1] sd 0:0:1:0: [sg0] tag#3326 CDB[c0]: 00 00 00 00 00 00 00 00 [ 481.944410][ T32] audit: type=1800 audit(1590529529.131:8): pid=13575 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15705 res=0 21:45:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14}], {0x14}}, 0xb8}}, 0x0) 21:45:29 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r2, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 482.127466][ C1] sd 0:0:1:0: [sg0] tag#3277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.138163][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB: Test Unit Ready [ 482.144949][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.154853][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.164717][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.174597][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.184445][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.194308][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.204168][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.213988][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.223804][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.233638][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.243471][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.253314][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.263155][ C1] sd 0:0:1:0: [sg0] tag#3277 CDB[c0]: 00 00 00 00 00 00 00 00 [ 482.280080][ T32] audit: type=1800 audit(1590529529.461:9): pid=13575 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15754 res=0 21:45:29 executing program 5: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLOCK(r2, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x82) fanotify_mark(r5, 0x9, 0x1010, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xc00, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x800) write$P9_RUNLINKAT(r6, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) r7 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000000)=0xffffffff, 0x4) 21:45:29 executing program 4: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:29 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:29 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 482.867811][ C1] sd 0:0:1:0: [sg0] tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.878492][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB: Test Unit Ready [ 482.885235][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.895071][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.895348][ C0] sd 0:0:1:0: [sg0] tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.904957][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.915305][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB: Test Unit Ready [ 482.924995][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.931568][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.941199][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.950805][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.960507][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.970180][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.979845][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.989504][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.999166][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.008818][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.018477][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.028132][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.037794][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.047451][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.057120][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.066769][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.079927][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.089601][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.099257][ C1] sd 0:0:1:0: [sg0] tag#3281 CDB[c0]: 00 00 00 00 00 00 00 00 [ 483.108975][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.126246][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.136105][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.145949][ C0] sd 0:0:1:0: [sg0] tag#3282 CDB[c0]: 00 00 00 00 00 00 00 00 [ 483.163067][ T32] audit: type=1800 audit(1590529530.351:10): pid=13601 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15705 res=0 [ 483.345252][ T32] audit: type=1800 audit(1590529530.371:11): pid=13599 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:45:30 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 21:45:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8931, &(0x7f00000001c0)={'team0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8931, &(0x7f00000001c0)={'team0\x00'}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r7, 0x7, 0x1ff) r8 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000840)={{0x0, 0x0, r9, r10, r9, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000040)={0x3, 0x33ae828b, {r7}, {r10}, 0x0, 0xc956}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, [], 0x3f}, @in=@multicast1, 0x4e20, 0x80, 0x4e24, 0x3f, 0x2, 0x20, 0x20, 0x2c, 0x0, r11}, {0x8, 0x20, 0xffffffffffffffff, 0x81, 0x8000, 0x8, 0x3, 0x9}, {0x800, 0x6, 0x80000001, 0x1ff}, 0x0, 0x6e6bba, 0x3, 0x0, 0x1, 0x2}, {{@in=@private=0xa010101, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x7f}, 0x3506, 0x3, 0x2, 0x0, 0x80, 0x3ff, 0x8}}, 0xe8) dup3(r2, r1, 0x0) dup3(r1, r0, 0x0) getrlimit(0x146933949d73eba7, 0x0) [ 483.744021][ T32] audit: type=1800 audit(1590529530.931:12): pid=13612 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 [ 483.937906][ T32] audit: type=1800 audit(1590529531.121:13): pid=13618 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15705 res=0 [ 484.053661][ C0] sd 0:0:1:0: [sg0] tag#3305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.064341][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB: Test Unit Ready [ 484.071156][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.081107][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.091106][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.101027][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.110860][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.120894][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.130787][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.140730][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.150669][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.160603][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.170638][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.180579][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.190496][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[c0]: 00 00 00 00 00 00 00 00 [ 484.451471][ C0] sd 0:0:1:0: [sg0] tag#3264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.462262][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB: Test Unit Ready [ 484.468930][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.478854][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.488737][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.498648][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.508511][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.518353][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.529353][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.539190][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:45:30 executing program 4: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:31 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x13, &(0x7f0000000080)=""/69, &(0x7f0000000100)=0x45) 21:45:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0xb, 0x0) [ 484.549022][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.558882][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.568739][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.578557][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.588375][ C0] sd 0:0:1:0: [sg0] tag#3264 CDB[c0]: 00 00 00 00 00 00 00 00 [ 484.618384][ C1] sd 0:0:1:0: [sg0] tag#3316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.629379][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB: Test Unit Ready [ 484.636155][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.646039][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.655974][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.665875][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.675800][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.685733][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.695665][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.705594][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.715514][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.725406][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.735300][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.745162][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.755077][ C1] sd 0:0:1:0: [sg0] tag#3316 CDB[c0]: 00 00 00 00 00 00 00 00 [ 484.830204][ T32] audit: type=1800 audit(1590529532.011:14): pid=13631 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15755 res=0 21:45:32 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 21:45:32 executing program 1: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:32 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:32 executing program 4: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) [ 485.824964][ C0] sd 0:0:1:0: [sg0] tag#3265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.825924][ C1] sd 0:0:1:0: [sg0] tag#3266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.835740][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB: Test Unit Ready [ 485.835895][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.846376][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB: Test Unit Ready [ 485.852928][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.862584][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.869111][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.878776][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.888366][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.898030][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.907691][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.917386][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.927036][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.936701][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.946362][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.956022][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.965734][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.975481][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.985104][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.994779][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.004435][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.014103][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.023753][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.033412][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.043081][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:45:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) [ 486.052729][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.062397][ C0] sd 0:0:1:0: [sg0] tag#3265 CDB[c0]: 00 00 00 00 00 00 00 00 [ 486.072068][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.098984][ C1] sd 0:0:1:0: [sg0] tag#3266 CDB[c0]: 00 00 00 00 00 00 00 00 [ 486.107468][ T32] audit: type=1800 audit(1590529533.271:15): pid=13645 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15705 res=0 21:45:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r2, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x1, 0xe, 0x131f}, &(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x8001}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) [ 486.302397][ T32] audit: type=1800 audit(1590529533.331:16): pid=13646 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 21:45:33 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 21:45:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) getrlimit(0x146933949d73eba7, 0x0) 21:45:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) 21:45:33 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 21:45:33 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) r1 = dup(r0) r2 = dup(r1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r4 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="82d9d8fdfc7a28beddb1b39acf000000000000000000000000db137f", 0x1c}, {&(0x7f0000000000)="54c2f61a444d511955b120b5c766f2baf8a4be58d57fb703a410423a", 0x1c}], 0x2) [ 486.904212][ T32] audit: type=1800 audit(1590529534.091:17): pid=13661 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15755 res=0 [ 487.033389][ C0] sd 0:0:1:0: [sg0] tag#3287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 487.043988][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB: Test Unit Ready [ 487.050596][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.060466][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.070291][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.080100][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.089904][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.099701][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.109504][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.119331][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.129158][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.138966][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.148786][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.158609][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.168437][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0xfffff000, 0x4) getrlimit(0x146933949d73eba7, 0x0) 21:45:34 executing program 0: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mremap(&(0x7f00008de000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00008f7000/0x1000)=nil) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 21:45:34 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1300, &(0x7f0000000000), 0x20000000) 21:45:34 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 21:45:34 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000f1c000/0x3000)=nil) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x600000, 0x3, &(0x7f0000000000/0x600000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 21:45:34 executing program 5: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000740)=ANY=[@ANYBLOB="5d82000023000184eafff1ff08f1de2fa3"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5200235}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000d2ed200a1f5c45a1584718ab8ec4caaa7a0000000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88e3fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x22, 0x80000001, &(0x7f0000000040)="b53217220bc0aab1e4a711dee1080c2d4371667e98f775cbd73cf1c48448c6e7be81"}) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x2, 0xc, 0x80, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, [], 0x3f}, 0x1f}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x7}}, @sadb_x_sec_ctx={0x8, 0x18, 0x6, 0x80, 0x32, "75e3896a3387cd9904196d0544f0d558dc0cbce63c05922804ec182b55199c8f26576dd037fb60fd422b9997fe9372402e1e"}, @sadb_x_sec_ctx={0x1a, 0x18, 0x2e, 0x80, 0xc6, "39dbb3b3fa9b219da694916464a58eb0d38d2f78576b0efeedb6f6d5a5824d86013e07c5f11de7714e5b0a4a4e34df5c143191195ff05ca42ae1d80bd9bd0d59f8f3ea47eee7d7d74189534467fe311572ab628994b771545dc384d9bff3c090692640310fbcb7dd19e3e4c3f3b496f35b71bd197daf321c761295dcb8e145a5d51b10a29abf077572f1a4bd1f95ec3fd0886a6b951a85996d9f13a64c0ff6f1f15623791025a9c698bbfd35fc75c1948ba89b58017471b1ce24b5f9b574cc750e2b0779d2a4"}, @sadb_address={0x3, 0x6, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @multicast2}}]}, 0x178}}, 0x1) 21:45:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) r4 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_OPEN(r7, &(0x7f00000002c0)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0xc}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8931, &(0x7f00000001c0)={'team0\x00'}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0d4}, 0xc400) getrlimit(0x146933949d73eba7, 0x0) 21:45:34 executing program 2: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x20) 21:45:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000001004000000000000500200005002000050020000500200004003000040030000400300004003000040030000030000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f6261746164760076657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280250020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000480000000000000000000000ffffffff08000000ff000000000000000000000000000000000000002800727066696c74257200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000300000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800000000000000a800f0000000000000000000000000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000736e6d705f74726170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x250, 0x250, 0x250, 0x250, 0x340, 0x340, 0x340, 0x340, 0x340, 0x3, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth1_to_batadv\x00', 'veth0_to_hsr\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'erspan0\x00', {0x2, 0x0, 0x48, 0x0, 0x0, 0xffffffff, 0x8, 0xff}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 21:45:34 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKROGET(r0, 0x80041285, &(0x7f00000000c0)) 21:45:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r3, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) [ 487.759063][T13697] xt_NFQUEUE: number of total queues is 0 21:45:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=']', 0x1}], 0x1, 0x1) [ 488.236357][ C0] sd 0:0:1:0: [sg0] tag#3301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.247027][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB: Test Unit Ready [ 488.253763][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.263599][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.266943][ T32] audit: type=1800 audit(1590529535.451:18): pid=13708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15755 res=0 [ 488.273454][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.301805][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.311649][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.321489][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.331360][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.341166][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.351023][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.360752][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.370623][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.380488][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.390356][ C0] sd 0:0:1:0: [sg0] tag#3301 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190f07003fffffffda060200000000e80001dd0000040d000c00ea1101fe004ccccca9", 0x29}], 0x1) 21:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}]}]}}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) [ 489.068701][T13718] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 489.156773][T13720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.227997][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.269113][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.305809][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:36 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x0) 21:45:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 21:45:36 executing program 5: unshare(0x600) r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 21:45:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190f07003fffffffda060200000000e80001dd0000040d000c00ea1101fe004ccccca9", 0x29}], 0x1) 21:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}]}]}}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) [ 489.640072][T13730] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 489.684820][T13732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190f07003fffffffda060200000000e80001dd0000040d000c00ea1101fe004ccccca9", 0x29}], 0x1) [ 489.786726][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 21:45:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x1, 0x0) [ 490.204776][T13749] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 21:45:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190f07003fffffffda060200000000e80001dd0000040d000c00ea1101fe004ccccca9", 0x29}], 0x1) 21:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}]}]}}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) [ 490.583292][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 490.607621][T13772] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 490.633472][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:37 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x0) 21:45:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 21:45:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd98, 0x10, &(0x7f0000000000), 0x176}, 0x48) 21:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}]}]}}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) 21:45:38 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x40}, 0x1c) getpeername(r0, 0x0, &(0x7f0000000340)) 21:45:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 491.190395][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.288069][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:38 executing program 1: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1d, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8931, &(0x7f00000001c0)={'team0\x00'}) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) r3 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(r6, 0x5601, 0x0) getrlimit(0x146933949d73eba7, 0x0) r7 = getpid() sched_getaffinity(r7, 0x8, &(0x7f0000000040)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x250481, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000100)=0x10000, 0x4) 21:45:38 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x0) 21:45:38 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x60000011}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x200034, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)={0xa800201f}) 21:45:38 executing program 2: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x30000) 21:45:38 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x36, 0xfe72}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/4, 0x4}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 491.622911][T13808] can: request_module (can-proto-0) failed. 21:45:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f90000000000040000000c000180080003"], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:45:39 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x10}}, 0x24, 0x0) 21:45:39 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001900053c00000000000000001d01090050001200fabd6d0aa21b9da4bc43c5011d6db2601b694183bf5b6f62569193773d31e108000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1c000000a94dd3471779d98c1b912ff8aac85617455825c989a2bc00000000"], 0x64}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) [ 492.096858][T13808] can: request_module (can-proto-0) failed. 21:45:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 21:45:39 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x0) 21:45:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x18, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}}, 0x0) [ 492.624711][T13849] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:45:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000200)={@local, @random="4ea35c9f13fc", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x7c, 0x0, 0x0, 0x0, {[@sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @mss={0x2, 0x4}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "3bf0f170e88f7721e84b0049c82e9809"}, @md5sig={0x13, 0x12, "c8dc7fab9801c21c3aa60a48d4d84c10"}]}}}}}}}}, 0x0) 21:45:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x2, 0x0, r0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000280), 0x0}, 0x20) 21:45:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updpolicy={0xfc, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x8, [{{@in=@multicast2}, 0x0, @in6=@loopback}]}]}, 0xfc}, 0x8}, 0x0) 21:45:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfd29, &(0x7f00000001c0)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f0000000180)=0x10) 21:45:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0xd, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) 21:45:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2d, 0x1, 0x0, "a501e5ffffff0100706dae569b4a02d2efd076dd8bb32880178f90f8f100"}) 21:45:41 executing program 0: unshare(0x20400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 21:45:41 executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 21:45:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x20}, 0x0) close(r2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:45:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x36) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffffffffd345) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) r6 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000400)={0x380000, 0x0, [], {0x0, @reserved}}) write(r6, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x8, 0x7, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x4489c) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x40) getrlimit(0x146933949d73eba7, 0x0) 21:45:41 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xfd}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 21:45:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) fallocate(r0, 0x41, 0x0, 0x8ae8) 21:45:42 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) mremap(&(0x7f000016c000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000031000/0x2000)=nil) 21:45:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, r3) 21:45:42 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2000, 0x3, 0x2e0, 0x170, 0xffffff80, 0x178, 0x0, 0xc7, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x401}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "a8805e1ca2ad28169f3a267a157dc4ec5453371969d267aebdad08724e00"}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 21:45:42 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1b00000019002551075c0165ff0ffc02802000030011020500e100", 0x1b) 21:45:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd0, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223a22eb6cb5ca768a7a65dc0e1782c845f956da0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479bafa8f2c1e78c8a5f29f680dc88b521f6fafd411d638e0facd7133a69ad7454b2c645a82e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:45:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x30, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}}, 0x814) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$CAPI_INSTALLED(r10, 0x80024322) r11 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:42 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1b00000019002551075c0165ff0ffc02802000030011020500e100", 0x1b) 21:45:42 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000700)=0xffffffff) 21:45:42 executing program 2: getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00}) 21:45:42 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1b00000019002551075c0165ff0ffc02802000030011020500e100", 0x1b) 21:45:43 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xfd}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 21:45:43 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1b00000019002551075c0165ff0ffc02802000030011020500e100", 0x1b) 21:45:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}, {&(0x7f0000000580)=""/97, 0x61}], 0x2}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x4, &(0x7f00000006c0)=""/13, 0xd}, 0x3f}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="bebc37573417944e7c2e03cd77c119789d8a3bd37ed060d2a27a9d8658601124aef9306601e9d9e910d8702b49885eeae2e2c79adbe7b9c69d191179dc90710a5b961ab56918e740d6484bcc8e02dfd85165c2055ee6ca47380c123f6afa4b64b1be4e4530cbcdd80b7a3b36edea7dee952aad83d71412f2ce0562d75ce8e78e07b7919375b738dad3cdadfa4453796749d043dc488dcd8b990b0a2e25d5cccfea2a80991321a4c85faa66693bd9e4532012ce66cd46f6dd811dda1e3bc40b8cfebc9012ad3324ac9a6e40c874e166536b0d9789053ef029fe5312a3fd1d05478810b025a1828aa8f97e8a05cde70c0b0b6d29fafdc0906e311584acb30f7f148809fd56e0455fb63c99715ea6b5bb10df741e63e6be60dd7bfd7a2d423f1761a84d33af84ec9f51f9414dd14f7a7825222faaf0741d4726b74659d3181772373eac23473ac228859a0ab8f1b6814637dc7f88b9015058a87a0aa1ce52f174b940aeed39b842fe52813d1dff1493379e14b2d188cfb19ce141faaf361e08c41afed6aeb68694725e4a7da9444d94ddf8a0a90066024447ab1d3ac4a4d2159047391ee9d1edb2516d40fbc9276957804563ea7f1acc92854b12bb8ba24cda6f11335ea7b88491883820e637afcf7df7bcec4611b4a532123533b59fd6e6758b02265d51c4b6e9f35a079fe93d73889910e606f5499f6b0e2c69f0ad2d5330254e9fc01e1cf6078e499208a44a7f9dec43b1d19ad62b11bf0dddf8c08b02ae24b771f30bf280903e9df9b97627f30e81e085f7ce8f0e540500eeaf2af13b945ff792fb0f7330c13e5d399305d19254881ad5dee59232c1c54e7d068fddfac69105f314d6bcd1959fd5d67dd7198f6b6912447b816b091815a1cd1fc4765f25b8e6974419d272a99badb9b226f8bf7cf3a7fdc670899d3f5a0f785cf686d5bf9f388ebb5f697fea841ef3690652a6b2ede1adfc2347b8b7f9897a523a3422b5bb3203b22fafe5996b91c64df2788dc9c9053ce0e27fcc9683563e82bd9497b70cfe747eda866bde0ce503e1afe32960ddd5d26a39995284758d6512ce0e124057833a67a0096a43336ed6cf5ae906378346606e27eb63ede50f666c27e00f8a2aea0042e348094fbd597b1ec1356d680290c4097c103070ba3df10c5c7445f8550af1361d701199fcfe7f79b4f7d947a06b64bbf60d33c0306f73bd3fb9e012681023d234c5d8927702e8ef643693b6d670791177bd7b31731bd351aa1a59a7cd1160772b0558a96a0ee21af013f0d84bda1542358ef0bad052f313853e0f32b43153200daa4bc5c4f51a314ead071cf67bb8177560bad893ff28953758441b6b2d909a35db8ab60a7bc798524ec75a53d0e5d43aff61827aad8b7584118152e3c7dbea9668133ff5ced4e8c70b2974afaca774e5dccbb3892a20c78682f8b9a716f3bc3c264ba3f1b5882f3a38669385ba6db9816c9cf08f462a6272a6c37649b6a40826ab7ceb2605f69e1bf65d0747163111f6897a1c85f10f1bf4a8aaf96b29ed15cd32fa24cac2ddda49d0fcde093c10e77fbcdc20c565ef2da60828ff953f2b82d7ed15c20ac2781708bf56cc551ae1bea960d7979f55fba87b67e5b76e48648503f84db9cf6dd44a799e28da8852082f06395a5da958be0d0c2ba74fcfddd525b565502f1709e5f9e51893974c890f39b2406c111442fba90f48739821e9908fd446f55aae6a7c00aec7c4ad2dafa911053ff49f57d79a8b0eb1747f40eb15ffa7aca8fc303460b16d448e74fae08d4b7434a86d4f6e2acb6e9ccac8ad3e6706de64c750d17d93261a2c34e69b55131604f4de452c6c08c2635dee21c6896c9d696706088155941ddb006f8d7b85978787f34200426488b433b3ad6906bb950b986267870289d2bffe1e0887ce3d9326af20b66fb230d4ace95c11536243a3b1f1ea00108f9c354a16ad3fab45f6ae536d3bdafad2712e9ff7184a80b7555cc506b2b094f01b73bcdee9cfe7483352e196346907f7c07931bebf967ee4798825a018d3565c29d27205e57347ba3498cb33e926809e8ac625b2c52afca8705c44ff8bd3e413fc3260dfa2ff4a099bfb074c4f77697581bb271a076e92bf8e26d4175ee95eae3af28a9ffe8abf59562d4a8d9766794e2347e6f07d7642a64d019bf6c0f96c6269a0787976b8c1446555dc66983d5a4ffa13cb7f5e47a0142cef49f28eabe8c1f3045a112bb841f2ac5ea79ccaea80b60dcb182e5c52535556702eef9a3338ce164d4fbf5c285d15ad307ae86315f1b122505841f7d8b09ec2facf4dfbc3a8253b5f0fe44fef960ecffd251e8ddb8f56b9ffa8f1da238961eafed5feea260000c8104a96541f9197e867534e81cf36850036676588e23a1035482014905934c9d49bc302bb9e9fbaf56008e27c3899bc4c56797a2de50887e6b770b848ac304317a1cfe408928016892e06a5d62272390fa5aec7c45a6e936d20ff009a0946d64acc35c542e2f6e4c7bd2c0e71bc93b76c47feb6474e5a9d2f7be3b0ddc67e82341d2cfe8314c2ccb587b4dc63d10eaf5e13afc1ed0fd9abd4f52a225cf2ebc5cbfac192440c754fbd3df589e72e03c05b7f120c85aaf82c07ab055345c61ab416bf385dbcd14c34e2a2e562970882a6f8e2bceb8a24d59c7db40edfafb3e66f44496b8575de7405b2d9fec42b40ef142efec36cd271b6207b6c668d24965de5ead6daa861679e0ff97185c841ea6865887c43fe44be254d2cf300b5b608d1bf58bf35866e10b178a35cf740cbff0c649e80851f130e00e35ea751f3e28dc835f1966d26bad82aff363925ab93437ea172b699e72e8949d6734f35b8556b138dadcc839797aca2a1e64fb63369a20007507b8af45cc0c66f6ded5d45e1c818bc89de4ce4298f098e35fbaeccd65e6508495acff22980bc3229fa863faf48e50be1bef352c0371874a6dc41799ac6686d80f214c900d6cb03769255537246dc3db2e61e119745044f5a52389dbabe153efcfcb0b6d3ff779a367e99a55b046aec47715b32a34b693bf2591ba71c0a03e1820fc9cacd15f2a0f5fbcb8d6f1401e3198910ee241463627e22093178a44c6ab0030436fbb4bcf580276120fc79b97fb2d73b9f26a1d4d37da7db64caa8b9f30fb1002d5e1eaf737373a9f203732547c4ad65d40fa91dd0e084c5dfce72e481349988474a443a15fd0b380fd1934346b1bd4cee07c021313dc69eb6888bf113c414310c7ad2bcd7e90663468d9d6cd5a3137d4592fc7bbcd076cfda7d7a846512025979c93216f046a6b4f77807a17caa183fd885a99646612f9f5c612281f4b08f86b8ac2fcb8695a6dcdc82e19cb239b6b757abf7bb93c1a3a0c70f05fd4884b19c6560f1e233ca3d03156338404a5b29fb34cb96cc2c21ea5bfd776ab4c900f63249417df63d301c7c789a08cfcedb44a10dd74265afdeeb84b3bb73d45d632b9695991d416b0d84764ef89259632ae961c10747e99f986589f9287e20b2616fc3c6c4fc3e51888c868b18b117fe3c7b37760bd324614c7238d433f3885346871a3746c6ca983c4712e9762b57cf570f42e9afe954338783d479fa3af9ccc3f4bb90ac2c0e4e253e7b54bf594a49d2f99b9f1d2b4b5f33e1472e4699010a562833905493dfda63216ab26846b076fc80291452f4314c2a6b52473af7a9133343006e62ce7f0a9696e8f4c874af2ec034271e644ed0b1d54bda457e83e9ed2ec4ab1318726729811fe8828f28c18727d195c5f46980182e790ad974c9418aa52a1b24b487c9f527a8290b455d759688f348f3815af29d197296173e027650c0f00da2e4a246dc42343ef6f998b08743813d2ddb9d6c9bbe4621300d0dd15560da9f34c07fe21f1e310be5fe936b6723bda266122d3831aba433a3951b92990d0546048cfd731a5d18ffa8e935d6a1dd56763f4caa2848ba46788a8ec29608d25c463d9d6cded45ae8a3d0f3b3b9aca3ff94e23281ff8cf500a245fc784c5afbd226f9becd9fbed3ddd44aa26ce1c5b8bbfd433a7163bf5f280139244cc7e50f84c773588c0a2f58627a24db7d3d5bd17f32072e8300bdd0344d7080b9877343f241a1f02026b9b8399267e2ea588c01ab0a3e0f942e37a051fa66fd148dd48a804a5ff80b5ac6bfe27083e11545eca3e403a0ce4ace2a24c6058b2dc75226260eacf5224ce18743f54e19f8dbb5b0077848b999a036077fe2fb4efcf7e03538dfe79d1fbed137d8c15c84694d582c7e5b0e6bcb8cab04097a2e824fb25c6b5d5506e3e4086a694d281ccdac65e96eddaf131d46f2ad5105e1ccbb1bbd9239cd73ec105c8d1636cc3094701ce826c1f2331e4d85870b7639e4e2cb4e13651b1b66c558df71d288187c8bbaf7137689d6324931cce22eec300bb2083e2abf274dd3f34309040aa006711277657c1b1ff5526d765cacbf91b22cdc755ed44901508c10de333dd126fc4b890cc9cb035a6ddf915ecc3c805a9bff67d901e4f5aeb4353c5ed1ef6f92590b0362acae8a8a54b3959d542a588432112aaa7a8a297930a352656f4e5565c10dbbcdffddf6125a4d2c1043f2feb6d31e3acc9ce2c9e374b28c602b01cab72768658b77bd7e0706cea5dc069fd700b0e29ad04eabd8fd579a80c3f39482d3ac338574e0c548e45fa649873ed7a684dce43f5bd023b5aa5eeb52f8c08dceef8644d8c553cb45d6bb0aa1c7adc928d47ced61a17eed3d869b9268decd67a72aa844c9e05eba7a88d9bdcdd78517a27e2c4c2021d589ad848f1c37d52e40fc8c0430b49b3d15cc9d7ec4123fee314dc5e67ffba13afb85ee7c3b8f0be23b801a7a56fccf281880ed00e46f425f33c9c7269e9185851625ff2c93d94f2c6cfb54376f4a0945e2aaae69b27877d034afcebb5a4427af74949a0e1c26ed295e59b0e7ad350528b8e5faf862ab81e8700c25990e7d3b8687513a059cee1d316aacb7f066851db7f46eca8f7ef09cf55a386b0921cf62a005920888512e9de8606696e320667ce594987be25a3b4e0ec1bfa799b1beb23b32eb6ef30b9b6bd41f5fea792afd383785d3bc22a6a4ec99f6954ed18193d4bd34007eb6a3a7c0867f000195d972cbefd71abce2aafd346b786bb0a4d7c71992bb25d8dedfa1b2e0f081f0a7481acd86bff78b34a23a7dc7db92026dd1ebcf59d04e99106ad46ecc04681af67bef188960bd77229a881492eeb2bafe5c224be28e339b54c53c4fb432bbe244b2598899fc9ffc3276c5a6325a582b60e9788933040af7815df6817cdbd4b640cdd2a9a4cb9389ec7b93839ae9f00cddc42294da71b935870841debeba960871221b47068ae1be1996fbbb59b1c447b7573f8601aca223ffccddc18b64ec92760c847b112a8fe7bb1dee83c740e598a70dcae0060f0dc81f34c0aa9d632680b4547fbe8f314546bc1f1cdf5dd2d63208b4f7991a0069486eae07cfed63aebcb7370d0a923b3c074d5b7fae5f5d7fb0e430a9c077c8d47156626df0c9ee4c18e4294ba7dedb9f847e2767df8987745dd4e7a4eaf03b695676879bfa0b96cb184645963f9a9ea70aa3b1328237f5d8e508571d6e06c7e7590a8b79567c39195bffc83c81055d170c59219dc26756b1e72e64d32e1247812e18694bf4e62fe65d5c1485b59effa289bc939ce4b2c9a0bb353b6f0ca529b90fc47b8776be1b036a63da934bac5a5fb91af74ba1128882bda602a8a05e2c890e52f2e627275406fcb701608469ab5a0cd57743aef63a33a7edba3433efa5c49d03e20b17e221f1cc45", 0x1000}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000006000/0x3000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:43 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8931, &(0x7f00000001c0)={'team0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000200000000ffdb9f25010000000c0099000197614ac7bacfed34e550c0000000010000000800ff0000000000f8099446f1a8d7975c"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd0001fbdbdf251a000000050092000300000008009a000000000008009a000000000008009a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012cbd7000020000001f0000000800011b0400000028c8af9ba2c2981f92bff41ac291bde8918e"], 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000300)=""/133, &(0x7f0000000280)=0x85) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000200000000ffdb9f25010000000c0099000197614ac7bacfed34e550c0000000010000000800ff0000000000f8099446f1a8d7975c"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012dbd0001fbdbdf251a000000050092000300000008009a000000000008009a000000000008009a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x412}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x6c20, 0x6, 0x0]}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb4, 0xffffff63}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c4}, 0x34008010) r10 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:43 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @empty, @empty}, "21f0f79cf56eb2b4e3a0de652b3dece9ba482240e69515b1ef549256"}}}}, 0x0) 21:45:45 executing program 4: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000d00)={'filter\x00', 0x2, 0x4, 0x408, 0x100, 0x100, 0x100, 0x320, 0x210, 0x320, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@remote, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="3705d1061724", @empty}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) 21:45:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd0, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223a22eb6cb5ca768a7a65dc0e1782c845f956da0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479bafa8f2c1e78c8a5f29f680dc88b521f6fafd411d638e0facd7133a69ad7454b2c645a82e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:45:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7], 0x20}}, 0x0) 21:45:45 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)=""/145, &(0x7f0000000340)=0x91) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000008, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x74]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:45 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xfd}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 498.414822][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0xac}, {0x6, 0x0, 0x0, 0x50000}]}) 21:45:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) syncfs(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrlimit(0x146933949d73eba7, 0x0) 21:45:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04400000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006f80)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b00)='M', 0x1}], 0x1, &(0x7f0000000440)=[@assoc={0x18}], 0x18}], 0x1, 0x0) [ 498.677039][T14021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:45:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf2, &(0x7f0000000140)="c4a4d2d2dd6fc16e8637759cb689fe910c67c136be55db5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca7712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d45fdffffff693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623193c8f9bff71342e168f4a6360ee9dda457cb21c0ad30f8669720985d4f97c5f6722fb05a5745df57636c5b03c740297e65811fd7f7631098bbcf3f872f956b8a00d9f550c22ec60d751af27530a3232b9ed5b82c57c996b6f98ecee53efe42fe8"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:45:46 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x186) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x15, 0x0, 0x0}) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000740)=""/178) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 21:45:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x4, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 21:45:46 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 499.004655][ C0] sd 0:0:1:0: [sg0] tag#3275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.015299][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB: Test Unit Ready [ 499.022070][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.031928][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.041825][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.051690][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.061653][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.071566][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.081382][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.091185][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.101051][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.110864][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.120640][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.130482][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.140420][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[c0]: 00 00 00 00 00 00 00 00 [ 499.159119][ C1] sd 0:0:1:0: [sg0] tag#3276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.169946][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB: Test Unit Ready [ 499.176709][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.186613][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.196533][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.206656][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.216565][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.226455][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.236507][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.246442][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.256378][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.266295][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.276231][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.286152][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.296028][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[c0]: 00 00 00 00 00 00 00 00 [ 499.386364][ C0] sd 0:0:1:0: [sg0] tag#3277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.397035][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB: Test Unit Ready [ 499.403780][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.413612][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.423441][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.433268][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.443105][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.452937][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.462774][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.472605][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.482616][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.492457][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.502283][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.512123][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.521931][ C0] sd 0:0:1:0: [sg0] tag#3277 CDB[c0]: 00 00 00 00 00 00 00 00 [ 499.927114][ C0] sd 0:0:1:0: [sg0] tag#3278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.937749][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB: Test Unit Ready [ 499.944497][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.954348][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.964180][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.974328][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.984167][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.994001][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.003820][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.013637][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.023464][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.033284][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.043095][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.052899][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.062729][ C0] sd 0:0:1:0: [sg0] tag#3278 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd0, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223a22eb6cb5ca768a7a65dc0e1782c845f956da0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479bafa8f2c1e78c8a5f29f680dc88b521f6fafd411d638e0facd7133a69ad7454b2c645a82e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:45:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x78, [], @string=&(0x7f0000000080)=0x8}}) 21:45:48 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xfd}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 21:45:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$vhci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="04d82f91174e6dc7a7610b0655eac221c45be4f9e668fad22f5863cbe6eda09fb262953e02e9571cf7f8360b26669ef8a6ee7a32fac82168a39b1a669543f2517c09e0"], 0xdb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)) 21:45:48 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 501.558056][ C0] sd 0:0:1:0: [sg0] tag#3279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 501.568735][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB: Test Unit Ready [ 501.575522][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.585380][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.595222][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.605071][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.614916][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.624818][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.634677][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.644517][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.654362][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.664211][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.674046][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.683889][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.693739][ C0] sd 0:0:1:0: [sg0] tag#3279 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:48 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:45:48 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:45:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf2, &(0x7f0000000140)="c4a4d2d2dd6fc16e8637759cb689fe910c67c136be55db5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca7712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d45fdffffff693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623193c8f9bff71342e168f4a6360ee9dda457cb21c0ad30f8669720985d4f97c5f6722fb05a5745df57636c5b03c740297e65811fd7f7631098bbcf3f872f956b8a00d9f550c22ec60d751af27530a3232b9ed5b82c57c996b6f98ecee53efe42fe8"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 502.012497][ C0] sd 0:0:1:0: [sg0] tag#3280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.023191][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB: Test Unit Ready [ 502.029806][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.039708][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.049568][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.059420][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.069274][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.079130][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.088977][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.099169][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.109018][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.118886][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.128771][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.138624][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.148458][ C0] sd 0:0:1:0: [sg0] tag#3280 CDB[c0]: 00 00 00 00 00 00 00 00 [ 502.157073][ C0] sd 0:0:1:0: [sg0] tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.167693][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB: Test Unit Ready [ 502.174400][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.184247][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.194086][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.203921][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.213747][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.223578][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.233411][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.243220][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.253070][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:45:49 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 502.262915][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.272730][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.282564][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.292401][ C0] sd 0:0:1:0: [sg0] tag#3281 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:49 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 502.594325][ C1] sd 0:0:1:0: [sg0] tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.605151][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB: Test Unit Ready [ 502.607009][ C0] sd 0:0:1:0: [sg0] tag#3283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.611927][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.622559][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB: Test Unit Ready [ 502.632256][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.638796][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.648473][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.658200][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.667802][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.677486][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.687152][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.696838][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.706534][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.716202][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.725859][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.735524][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.745274][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.754952][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.764624][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.774305][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.783966][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.793629][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.803314][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.813006][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.822661][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.832328][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.841980][ C1] sd 0:0:1:0: [sg0] tag#3282 CDB[c0]: 00 00 00 00 00 00 00 00 [ 502.851660][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.868912][ C0] sd 0:0:1:0: [sg0] tag#3283 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:50 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 503.376843][ C0] sd 0:0:1:0: [sg0] tag#3284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.387560][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB: Test Unit Ready [ 503.394322][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.404167][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.414011][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.424793][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.434674][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.444575][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.454475][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.464342][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.474248][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.484131][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.494050][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.503960][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.513866][ C0] sd 0:0:1:0: [sg0] tag#3284 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:50 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:45:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd0, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223a22eb6cb5ca768a7a65dc0e1782c845f956da0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479bafa8f2c1e78c8a5f29f680dc88b521f6fafd411d638e0facd7133a69ad7454b2c645a82e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:45:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x848}, {0x80000006}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 21:45:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 21:45:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:45:51 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181"], 0x14f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008840}, 0x20000004) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x70e00, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfff9, 0x7, 0x9, 0x555, 0x8ed}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x5a171f14abc615f7, 0xfffffffa, 0x400, r3}, &(0x7f0000000400)=0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x5, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', 'securitywlan0\x00'}) r7 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 504.739111][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 504.739238][ C1] sd 0:0:1:0: [sg0] tag#3286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.748609][ C0] sd 0:0:1:0: [sg0] tag#3287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.756769][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB: Test Unit Ready [ 504.767229][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB: Test Unit Ready [ 504.773784][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.780258][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.789963][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.799640][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.809424][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.819121][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.828807][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.838477][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.848164][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.858913][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.868577][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.878237][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.887894][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.897561][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.907236][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.916911][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.926588][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.936251][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.945916][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.955581][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.965305][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.975017][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.984680][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.994372][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.004027][ C1] sd 0:0:1:0: [sg0] tag#3286 CDB[c0]: 00 00 00 00 00 00 00 00 [ 505.013705][ C0] sd 0:0:1:0: [sg0] tag#3287 CDB[c0]: 00 00 00 00 00 00 00 00 21:45:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf2, &(0x7f0000000140)="c4a4d2d2dd6fc16e8637759cb689fe910c67c136be55db5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca7712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d45fdffffff693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623193c8f9bff71342e168f4a6360ee9dda457cb21c0ad30f8669720985d4f97c5f6722fb05a5745df57636c5b03c740297e65811fd7f7631098bbcf3f872f956b8a00d9f550c22ec60d751af27530a3232b9ed5b82c57c996b6f98ecee53efe42fe8"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 505.397918][T14155] binder: 14151:14155 unknown command 0 [ 505.403974][T14155] binder: 14151:14155 ioctl c0306201 20000280 returned -22 21:45:52 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x58, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0xf02f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x73b000, 0x0}) 21:45:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:53 executing program 3: unshare(0x2000400) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 21:45:53 executing program 3: unshare(0x2000400) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 21:45:53 executing program 3: unshare(0x2000400) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 21:45:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xedc0) 21:45:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:54 executing program 3: unshare(0x2000400) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 21:45:55 executing program 5: unshare(0x600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5409, &(0x7f00000000c0)) 21:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xb4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x140b, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 21:45:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:55 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000180)=[{0x3, 0xffff}], 0x1) semtimedop(r0, &(0x7f00000000c0)=[{0x4}, {0x3, 0x5}], 0x52, 0x0) 21:45:55 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) 21:45:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf2, &(0x7f0000000140)="c4a4d2d2dd6fc16e8637759cb689fe910c67c136be55db5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca7712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d45fdffffff693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623193c8f9bff71342e168f4a6360ee9dda457cb21c0ad30f8669720985d4f97c5f6722fb05a5745df57636c5b03c740297e65811fd7f7631098bbcf3f872f956b8a00d9f550c22ec60d751af27530a3232b9ed5b82c57c996b6f98ecee53efe42fe8"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:45:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 21:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xb4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x140b, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 21:45:56 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 21:45:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, 0x0}}, {{&(0x7f0000007500)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/16], 0x10}}], 0x2, 0x0) 21:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xb4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x140b, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 21:45:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in6=@mcast2, @in6=@empty}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@multicast2, @in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast1, @in=@broadcast, @in=@broadcast, @in6=@rand_addr=' \x01\x00'}]}]}, 0xec}}, 0x0) 21:45:57 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) 21:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xb4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x140b, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 21:45:57 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 21:45:57 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 21:45:58 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 21:45:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8014001a, r2}) 21:45:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x7}]}]}, 0x54}}, 0x0) [ 511.756980][T14268] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 21:45:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0xfffffffd, 0x4) sendto$inet(r0, 0x0, 0x0, 0x24008000, &(0x7f0000000180)={0x2, 0x4e25, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:45:59 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 21:45:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="39000000130009006900000000000000ab0080481000000046000107000000141900010000000000000003f5169dcd4a77282b0bdca4000000", 0x39}], 0x1) 21:45:59 executing program 0: r0 = socket(0x1e, 0x5, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x10000}, 0x10) r2 = socket(0x1e, 0x805, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f00004f5000)=@tipc=@nameseq={0x1e, 0x2, 0x0, {0x40000}}, 0x80, 0x0}, 0x0) 21:45:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write(r0, 0x0, 0x3) 21:45:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x5411, 0x2070e000) 21:45:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x5e7, 0x2b0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x80000001, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000180)) 21:45:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:45:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2d00000000003400000060bc7d94004c2c00fe8000000000000000000000000000bbff0200000000000000000000000000012f00000000000000842022eb"], 0xfdef) 21:45:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 21:45:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000016008502140f80ecdbffffffff0000003f000000040001008eb3d8152ec77948f328995a017c7b585106", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 512.509431][T14304] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:45:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee1, 0x0) 21:45:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 21:45:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b98d91c22def1125d7b1e821039a85ad8b91ceaf3e0b5556a98", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:45:59 executing program 3: request_key(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb) [ 512.959146][T14305] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:46:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x5411, 0x2070e000) 21:46:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r3, r0, 0x0) 21:46:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32=r5], 0x48}}, 0x0) dup3(r3, r5, 0x0) 21:46:00 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) [ 513.315072][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 21:46:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)="d4", 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000000080)=""/16, &(0x7f000021affc)=0x10) [ 513.369299][T14341] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 21:46:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x8, 0x2}, 0x10}}, 0x0) 21:46:00 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00'}) 21:46:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) 21:46:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1, 0x0) 21:46:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) unshare(0x4020400) setrlimit(0x7, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 514.191909][ T0] NOHZ: local_softirq_pending 08 21:46:02 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001140)={0x0, 0x0, 0x0, {0x3, @sdr}}) 21:46:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220407b5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:46:02 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') 21:46:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff}) 21:46:02 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = dup2(r1, r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x28100) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0xbf) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x1000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r5, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{}, '\x00', "2026b200", '\x00\x00\x00@', "d3ff7f00"}, 0x28) 21:46:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x5411, 0x2070e000) 21:46:02 executing program 1: syz_emit_ethernet(0x256, &(0x7f0000000500)={@random="9f2193f9bff4", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4d888c", 0x220, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @ipv4={[], [], @multicast1}, [{0x0, 0x0, '-'}, {0x0, 0x18, "403c34fbacb8b788947cc4fef8cbe9a02af73cb2bbb2bfab56a1f7ad568a9a3fb3eec4307fe259f6ccb43efb05b15e8812f16007a3518857053b74b4e53f62e8fbf9d01caffb38ad401913c0358a27309f7ca264ab27da1339831be73856bd9b930252417d648703b8ba6dc467b1b044061ab496105ba4e155f2963bace8fa3a5018a7a852c46a5e737f10b559e65c932b77bc91080bfb57315e830ee71b1c17c46fed70004bb8fffeaef41e46cd0801c5ffffffffffffffd66a218979b30c0000"}, {0x0, 0x10, "e1df83bb49bb10f9c32d59fe85a41f56f6a65aaba58b90d8080a8f2e7bcf95e19bf9be4c05e68ac840000d06048ab68a423c7efdeebf2a0f6d5841c8c9bbb4d227fafb665aa9c42adf3ed735d7af3c26518f8558b870cff561508af652059b6079918a16574f639ba59c2b0ac59c77bc7936de55e4859b9611550a1c292ea4ff"}, {0x0, 0xe, "264c6c61ff62f2b4479e59903a635d01c91da59269c35dd0fd968b42b78416eb2c32eec494396f22e7bce91f32258a60b96057f1f9805da61eacfa6e2a57e3634de3b5f2b6c0b1206af16e4f83b36b1c6cc678b43cb7d0916694bc254df852c2b20f96e2df78fdb123254bfee7d75c43549637"}, {0x0, 0x8, "f3569511d4933906107183880e81fe5f81741d19956a34499aaaa0d51d1e0bd8e5b7a5437689576556ac60e94300def1351b753dc2c4b14b66e440a899f165e43b8e8940fa"}, {0xe, 0x1, "00d46410d79f"}]}}}}}}, 0x0) 21:46:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_GETDRIVER(r0, 0xc0105512, &(0x7f0000000100)={0x0, "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"}) 21:46:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x46}]}}}]}, 0x3c}}, 0x0) 21:46:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x49d0, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:46:03 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') exit(0x0) wait4(0x0, 0x0, 0x80000002, 0x0) sendfile(r0, r0, 0x0, 0x1) 21:46:03 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000004580)=ANY=[], 0x2}, 0x0) 21:46:03 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = dup2(r1, r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x28100) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0xbf) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x1000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r5, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{}, '\x00', "2026b200", '\x00\x00\x00@', "d3ff7f00"}, 0x28) 21:46:03 executing program 1: creat(&(0x7f0000000100)='./bus\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x319030, 0x0) 21:46:03 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000dfffffffff090001004445ed9a2d5ba9bbbbbbbbbbbb0000966313baa4666e7648637b83f5e8891a88683bc5430633c6"], 0x2c}}, 0x0) r4 = socket(0x10, 0x400000100080003, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x2e7, 0x0) 21:46:03 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_setup(0x8000000000000002, &(0x7f0000000480)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffc}]) 21:46:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000027c0)={0xa20000, 0x7, 0x6, r1, 0x0, &(0x7f0000002780)={0x9a0913, 0x0, [], @p_u8=&(0x7f0000002740)=0x9}}) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 516.685581][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x5411, 0x2070e000) 21:46:03 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = dup2(r1, r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x28100) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0xbf) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x1000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r5, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{}, '\x00', "2026b200", '\x00\x00\x00@', "d3ff7f00"}, 0x28) 21:46:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="f3ad0f20e0350000d7a5f30f09660f013e66b895008ee82626205bf30f098503f800443c0f2096c00f0000660f73f20022c0b949090000f3e1000fae44ee08", 0x3f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8001}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000000000000000000008001f0003000000", 0x24) 21:46:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000100000000000000000700000000", @ANYRES32=r4, @ANYBLOB="000002ff000000000040f1ff"], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:46:04 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = dup2(r1, r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x28100) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0xbf) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x1000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r5, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{}, '\x00', "2026b200", '\x00\x00\x00@', "d3ff7f00"}, 0x28) [ 517.047485][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.086227][T14454] kvm: emulating exchange as write 21:46:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080800001028e6c467144d2fa833bbe4447afd407c49f3897d1919ea325881ff053419acb70a0affc980123d4377eadf3437e91f0afa85259c5c4ee4a830ff2f08bf679f7a486678e6ac84000d8164510afb66b15c1d3039505bc221d01585dcd06c0b04"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x9) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x2}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) [ 517.183483][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000027c0)={0xa20000, 0x7, 0x6, r1, 0x0, &(0x7f0000002780)={0x9a0913, 0x0, [], @p_u8=&(0x7f0000002740)=0x9}}) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 517.337639][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 517.464727][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000100000000000000000700000000", @ANYRES32=r4, @ANYBLOB="000002ff000000000040f1ff"], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:46:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) close(0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 21:46:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080800001028e6c467144d2fa833bbe4447afd407c49f3897d1919ea325881ff053419acb70a0affc980123d4377eadf3437e91f0afa85259c5c4ee4a830ff2f08bf679f7a486678e6ac84000d8164510afb66b15c1d3039505bc221d01585dcd06c0b04"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x9) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x2}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) [ 517.720795][T14446] debugfs: Directory '14446-4' with parent 'kvm' already present! [ 517.745949][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:05 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x1) 21:46:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080800001028e6c467144d2fa833bbe4447afd407c49f3897d1919ea325881ff053419acb70a0affc980123d4377eadf3437e91f0afa85259c5c4ee4a830ff2f08bf679f7a486678e6ac84000d8164510afb66b15c1d3039505bc221d01585dcd06c0b04"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x9) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x2}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) 21:46:05 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000027c0)={0xa20000, 0x7, 0x6, r1, 0x0, &(0x7f0000002780)={0x9a0913, 0x0, [], @p_u8=&(0x7f0000002740)=0x9}}) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 21:46:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000100000000000000000700000000", @ANYRES32=r4, @ANYBLOB="000002ff000000000040f1ff"], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:46:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) 21:46:05 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) [ 518.265022][T14512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.329780][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r0, 0x0, 0x0, 0x10, 0x0, 0x0) 21:46:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080800001028e6c467144d2fa833bbe4447afd407c49f3897d1919ea325881ff053419acb70a0affc980123d4377eadf3437e91f0afa85259c5c4ee4a830ff2f08bf679f7a486678e6ac84000d8164510afb66b15c1d3039505bc221d01585dcd06c0b04"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x9) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x2}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) 21:46:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000100000000000000000700000000", @ANYRES32=r4, @ANYBLOB="000002ff000000000040f1ff"], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:46:05 executing program 0: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x4, 0x10}, 0xc) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 21:46:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'bridge_slave_0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:46:05 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000027c0)={0xa20000, 0x7, 0x6, r1, 0x0, &(0x7f0000002780)={0x9a0913, 0x0, [], @p_u8=&(0x7f0000002740)=0x9}}) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 518.748793][T14539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007910a80000000000bc5000e00000000095000000000000007b52a544296792ed8a4ed8f48695e1f626a0cf90d1cc0ad0413a9b821c67db6f6f497d958bd0277145a6b1a9cf3ac32385af12d1fb100f88385c020418a2f09051d57990079078e070d666166a0e77afa43ddbff2ac5d2ed50ccdb257a66692b25e380ead74ab9984c65ea6024c394ec7c0f30305b5546187c10efbcf0933057d79b87e3af577eb59f1596baf757f0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 21:46:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x100000001) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x20000000000000ac}, 0x10}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x0, 0x0, 0x0, 0x400, 0x3, 0x4000000, r4}) [ 518.982739][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:06 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @remote}, 0x0, 0x3c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x10c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:46:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000815, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) 21:46:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x5, 0x47}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)) [ 519.268893][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 519.300734][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:06 executing program 5: unshare(0x6000400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x6) 21:46:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 21:46:06 executing program 0: clone(0x84802d80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xc0\xb1\xef\xb1\xa7\x14q\x98\xa9\xc0\xd5\xa7\x1dZ\xa3\x86\b \x87\xad$\xc3\x8b\xa4\xaa\xdbd\x9c\x01\\\x95Iww\x16\xc7h\xdd\x93\x9a\x1e@\xdf\xba\xf8\x88t\xc1\xb9<\x124\xa9\'_\xec>\xaf\xdd\xb0\v\xad\x1a\xf3Nc\xf6a\xc1X\x1c\xdd6\x1bl$\xd6\x82\xc4:Pp_J\x87\xa9\xbb\xb0\xf1E\xb6\xef\x02/j%\xc5\xa5\xe8Xf\x9c\xaaWDC\xed\xd4r\xa4\t\x88E\xd9Cb\\\x91\x90)\xbajz\xb2\x04g\xbc', 0x0) io_setup(0x103, &(0x7f0000000040)=0x0) io_destroy(r3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:46:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e25, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit_2292={{0x14, 0x29, 0x37}}], 0x18}, 0x0) 21:46:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x28048041) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWRULE={0x650, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_USERDATA={0xb4, 0x7, 0x1, 0x0, "8b02ac63bb3afd4017a06357bbd82daddd7ee0a8ce2f266ccb90f54c487cd0161a3db5b72472ae44c5087cf5e131c9e95c71990526e89b1a628925a0ca0a3f2c7c1dfb05f370cd2ef4275991cd35a9d78941b799112e52e5cd027fe3e31843e6d4c36ba5834bdb983d2a851c359db60c878484514c860ca669143cb6eaf60d08b723637ca2009e5d7b22619a4e693b20dd8760cc18ba8d7f5e28b198f7d56233e26edcb3181c10ecdeac504af109fd09"}, @NFTA_RULE_EXPRESSIONS={0x584, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@redir={{0xa, 0x1, 'redir\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8}]}}]}, {0xd8, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @target={{0xb, 0x1, 'target\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8f400000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc}]}}]}, {0x98, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xbd}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x80}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_IMMEDIATE_DREG={0x8}]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}]}, {0x330, 0x1, 0x0, 0x1, [@bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x268, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x20, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'q'}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_BITWISE_XOR={0x98, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "3109037808ad6292b86df0eccc3aea40230ca3b22e09050437209175bc1d7f65917112c6e37e8ff38ebad053b155ca97b838cbcdb7628cf752ec160d08cde6295fab8cc0277d101f866831dacc77d9"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_MASK={0x1a8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "a7f96691236e4fbda09a18afed851cf9b7dbd07e6dca28a62dc12a282dfcbfab8dbec1295b59f243561ceaa58ab0252e4fba7f04e28dbd1cfe2c2cd28b82bb947f5200c689d2fedf46184d13d629f8a509f906084370c5d08228fbff7fec0d557194cd8da9268c02af5372de21a4b2badaa32c90ffdde3ceabcdc993e4a21aba3d07d632434b4815c242d202468a20845aed7e5f1b13a50ff3b42c7bf82cf10285bb785f8f463adb82650a25"}, @NFTA_DATA_VALUE={0x7f, 0x1, "4946473fdace1ba36d9e8071a4322b0d37c73b31f33a81bd6586ba1aeb9a409452af39f45fd4f15773ca43d8d5060578a1ec0e8154f7847d1c99a8ce0f9f74b1e80293547a42363d53d6216960005bdec860b00d7b85844a66b1c8f24af9990f7b0986371f78d875b854a5a1eae2b34f996dbfd79b72cde11c83b8"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}]}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe0}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}]}, {0x50, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x4}}, @match={{0xa, 0x1, 'match\x00'}, @void}]}, {0x38, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}]}}, @target={{0xb, 0x1, 'target\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}]}]}]}], {0x14}}, 0x6bc}}, 0x0) 21:46:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81}, 0x20) 21:46:07 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe80390008000800020000dc13382d003f009b7a136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d240000060c", 0x55}], 0x1}, 0x0) 21:46:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&\x00'}, 0x7) 21:46:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x3f}, 0x0, 0x0) 21:46:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') [ 520.022566][ T32] audit: type=1400 audit(1590529567.212:19): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=14589 comm="syz-executor.1" 21:46:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r4, 0x10, 0x4, 0x8001) lseek(r3, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) 21:46:07 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 21:46:07 executing program 5: ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) r0 = socket$kcm(0x2, 0x1000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x68, &(0x7f00000001c0), 0x4) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 21:46:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 21:46:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x100000001, 0x0, r0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/70, 0x46}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 21:46:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r4, 0x10, 0x4, 0x8001) lseek(r3, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) 21:46:07 executing program 2: readv(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0}], 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000011000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) 21:46:07 executing program 3: close(0xffffffffffffffff) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) [ 520.720361][ T32] audit: type=1804 audit(1590529567.902:20): pid=14623 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/299/file0/bus" dev="sda1" ino=15757 res=1 21:46:07 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x2f, 0x0, @remote, @private2, {[], {{0x3580, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 21:46:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 21:46:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r4, 0x10, 0x4, 0x8001) lseek(r3, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) 21:46:08 executing program 3: ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) 21:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x100000001, 0x0, r0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/70, 0x46}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 21:46:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000fb"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) execve(0x0, &(0x7f00000004c0)=[&(0x7f0000000140)='wlan0-]\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={0x0, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 521.119142][ T32] audit: type=1804 audit(1590529568.302:21): pid=14649 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/300/file0/bus" dev="sda1" ino=15757 res=1 21:46:08 executing program 5: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 21:46:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 21:46:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0x88}}, 0x0) 21:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x100000001, 0x0, r0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/70, 0x46}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 21:46:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r4, 0x10, 0x4, 0x8001) lseek(r3, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) [ 521.473530][ T32] audit: type=1804 audit(1590529568.662:22): pid=14667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/301/file0/bus" dev="sda1" ino=15757 res=1 21:46:08 executing program 2: shmget(0x3, 0x2000, 0x6f69126639cb1e2d, &(0x7f0000ffd000/0x2000)=nil) 21:46:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x100000001, 0x0, r0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/70, 0x46}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 21:46:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"06000000dd245c84010100c0c9c8dc1964325fa96fa4ffffe00600002bec0ba41f0100003a40c8a4150001c03b00040000000000003c5ca2410101c0ee377abaece6b88378e3d63a98fc191f361d264fe4d546485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c3f5ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff00000090bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c1186c2f2ef187de835cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525b888c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fe46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 21:46:08 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @source_quench={0x14, 0x0, 0x0, 0x10000e0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 21:46:08 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') sendfile(r0, r1, 0x0, 0x10001) 21:46:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x180000000) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 21:46:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000040)={0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x1515], 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 522.104749][T14696] debugfs: Directory 'vcpu0' with parent '14696-4' already present! [ 522.147938][T14703] QAT: Invalid ioctl [ 522.152247][T14702] QAT: Invalid ioctl [ 522.156464][T14702] QAT: Invalid ioctl [ 522.171750][T14703] QAT: Invalid ioctl 21:46:09 executing program 5: r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') 21:46:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x0, 0x0, 0x6}}) sync() 21:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0001000000000000000000000000ff00"}}) 21:46:09 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100), 0x0) 21:46:09 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)="a7", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 21:46:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) 21:46:09 executing program 2: r0 = memfd_create(&(0x7f0000001740)='vboxnet1vb\x7fxnet1%!}%{em1\x10%.nodev-[\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf5, 0x0, &(0x7f0000000000)) [ 522.464724][ C0] sd 0:0:1:0: [sg0] tag#3310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.475453][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB: Test Unit Ready [ 522.482220][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.492210][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.502112][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.512003][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.521849][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.531686][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.541520][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.551365][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.561233][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.571084][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.580952][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.590805][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.600645][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) 21:46:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3a, 0x2, 0x0, "37aa5adb87cc76bf42c307693f92820d40d69407c63ac000"}) [ 522.625084][T14722] input: syz0 as /devices/virtual/input/input7 21:46:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) 21:46:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) [ 522.887482][ C0] sd 0:0:1:0: [sg0] tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.893060][T14742] input: syz0 as /devices/virtual/input/input8 [ 522.898223][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB: Test Unit Ready [ 522.910942][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.920798][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.930652][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.940571][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.950325][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.960199][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.970067][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.979958][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.989807][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.999645][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.013028][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.022871][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.032850][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x101, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x24}}, 0x0) [ 523.236866][ C0] sd 0:0:1:0: [sg0] tag#3274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 523.247599][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB: Test Unit Ready [ 523.254366][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.264288][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.275688][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.285528][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.295364][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.305212][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.315058][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.324927][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.334773][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.344616][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.354675][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.364535][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.374371][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @loopback}}, 0x20) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a32000000000500010006000000050005"], 0x54}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 21:46:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x0, 0x0, 0x6}}) sync() 21:46:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) 21:46:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) 21:46:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) 21:46:10 executing program 1: unshare(0x600) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) [ 523.696190][ C0] sd 0:0:1:0: [sg0] tag#3275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 523.706908][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB: Test Unit Ready [ 523.713662][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.723500][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.733337][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x0, 0x0, 0x6}}) sync() [ 523.743228][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.753057][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.762914][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.774574][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.784416][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.794270][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.804163][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.814019][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.823900][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.833948][ C0] sd 0:0:1:0: [sg0] tag#3275 CDB[c0]: 00 00 00 00 00 00 00 00 [ 523.836548][ C1] sd 0:0:1:0: [sg0] tag#3276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 523.852237][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB: Test Unit Ready [ 523.858911][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.868720][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.878530][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.888404][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.898211][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.908035][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.917860][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.927687][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.937511][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.947352][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.957188][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.967013][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.976848][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[c0]: 00 00 00 00 00 00 00 00 [ 524.032346][T14776] input: syz0 as /devices/virtual/input/input9 21:46:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) [ 524.221977][T14791] input: syz0 as /devices/virtual/input/input10 [ 524.368558][ C0] sd 0:0:1:0: [sg0] tag#3297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 524.379314][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB: Test Unit Ready [ 524.386108][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.396011][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.405887][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.415770][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.425669][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.435593][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.445616][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.455507][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) [ 524.465400][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.475300][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.485197][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.490741][ C1] sd 0:0:1:0: [sg0] tag#3296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 524.495015][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.505398][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB: Test Unit Ready [ 524.515112][ C0] sd 0:0:1:0: [sg0] tag#3297 CDB[c0]: 00 00 00 00 00 00 00 00 [ 524.521681][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.529274][ C0] sd 0:0:1:0: [sg0] tag#3298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 524.538859][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.549303][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB: Test Unit Ready [ 524.558984][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.565542][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.575218][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.584892][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.594563][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.604230][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.613889][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.623622][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.633281][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.642953][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.652607][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.662273][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.671931][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.681612][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.691295][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.700963][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.710626][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.720227][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.729896][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.739575][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.749230][ C1] sd 0:0:1:0: [sg0] tag#3296 CDB[c0]: 00 00 00 00 00 00 00 00 [ 524.758909][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.766575][ C1] sd 0:0:1:0: [sg0] tag#3299 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 524.776160][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.786592][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB: Test Unit Ready [ 524.796275][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[c0]: 00 00 00 00 00 00 00 00 [ 524.802816][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.820119][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.830149][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.840028][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.849820][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.859619][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.869490][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.879366][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.889231][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.899157][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.909042][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x200000000006]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) [ 524.918923][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.928819][ C1] sd 0:0:1:0: [sg0] tag#3299 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) [ 525.457102][ C1] sd 0:0:1:0: [sg0] tag#3320 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 525.467895][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB: Test Unit Ready [ 525.474616][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.484482][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.494401][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.504290][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.514155][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.524083][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.533975][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.543867][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) [ 525.553753][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.563611][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.573489][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.583364][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.593220][ C1] sd 0:0:1:0: [sg0] tag#3320 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x0, 0x0, 0x6}}) sync() 21:46:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x0, 0x0, 0x6}}) sync() 21:46:13 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x380180, 0x0) signalfd(r0, &(0x7f0000000280), 0x8) 21:46:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507a92300000000007b16000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x20}}]}}]}, 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:46:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000000700fff64017db9820000000000000d423ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d23822c013286344c03948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80819a277d9079cc4cb5e0ab17b299b81f2d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f333396d74c92fad7e34bd5522400cc36c2442eac2d224609abe062060800000200000000000000000000f390d71cc6092cddd3b056f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a0e786b6d985f7f04533da93f7b0ee0ceb0e80600cff8ca2996e518e3e69051f6d243e0e9b2be17f9ebfeb82ee2469fb39bdbb2768d25f19600002dc045421b94d878d0d9c2a5c74633b6cd8ae563734d4f1089a687a135308e49ce058c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f71d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643dbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f7bc830a34b0beb"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) 21:46:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 526.343866][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 526.437107][T14857] input: syz0 as /devices/virtual/input/input12 [ 526.447355][T14864] input: syz0 as /devices/virtual/input/input13 21:46:13 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60a0f00001183affe5297acb75564bcbd52765767014d840ff0200000000000000000000000000018800907800000000fe800000fae11e620f0e349c48316e55461d230000000000000000000000aa0220cf2f4cce3351bfd61f89f0ff510522d90cf7da591b76c8480d33b0b52507876e8786f3ee302a5c86d763b00566bbd823871024cf1c28e39bb22595"], 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000003c0)="01000000000000001801000004000000e5232f0800d859832f") 21:46:13 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 526.625400][T14865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa14617560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e000000000765387245d75ee8f8acfacc1c5e1520e3ef44c279a48a6dd1477bc12fd514b4fe80812d274014ae40b8ae4f2a88e2fbea7b1f488505ddd46e9930a938817fd7299f385a9c592f5ba5489ebf62c73686ad516af6c29eaa55ff95c26c14f1309a94895a81276bc1ca19499cb6e0d1ade8f98937b6251497aaf8cfeccdc3b75bfdb0ec6a808a1a4ed716acdc98963f6ae26bf6ae2a0816a714b685eb28292e638f9c9e792628eb399db24e08c672d5510ca3fbc7953fd195b54b908bb930400c7a078fd6daea73643eb4e23a5a8758e10aeb59ceacbf9926030168e700f59806c177bdfeaca5f94ba273092470ab76b7a92337ad7a73d9aa8239d8da53ec6965594826d5fba07913825623118ced208d26ae18eda835b3e510f5ac7e227bcdcccbf556"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x0, 0x0, 0x6}}) sync() 21:46:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) 21:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x0, 0x0, 0x6}}) sync() 21:46:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x84}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x300}, 0x4) 21:46:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @multicast1}}}, 0x90) [ 527.052439][T14902] input: syz0 as /devices/virtual/input/input14 [ 527.078002][T14900] input: syz0 as /devices/virtual/input/input15 21:46:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4140, 0x0) 21:46:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0x0) 21:46:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="0a00000000001000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8, 0xfffd}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x4e}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) 21:46:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) 21:46:14 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x14f) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000800)={'exec ', ':\xae\x86\xadG\xaa\r\x94\x95\xe6\xd8\x0f{\xde-\x18\xff\xb3l\xae\xd2\xd4\b\xfbX\xe3\x05\xfc\x8e//}\x91\xf8\x1bb\x1c\xc4!MJ$\xe1aO\xbe\xe0\xbe\xac\x8fJ\x04Pr\xb7p!-F\xd4\xa2\xdf\tky\x1f*K\xa2\x18\xe1,\b\xff\xff\xff\xff\xff\xffC\xb4\xe1\xadZG\xb7j\xa2IE\xb7\n|\x9d\xd5\xed\xea\xc5+Z\x87os\xcf\xbef7\x1ar\xfd!\xe1\x83\b\x8a\x1eM\x9b\x8a\xecK\xf1\x1f=\x95D\xd6\xb5\x9bJU\xb2\xab\xee\\\xbf\x11*\xa4\x80\xbdM\xde\xf2r\xf9\v\x8c\x10\x1f\x8c\x1b\\\x8f\xe4\x1e\x17\x0f\xd0\xc7u\xdb\xc5\xbe\vm:\xea\xbe`(\xa4|d\xaf\xb6%\xabp.[\x1d\xc1_\x9cK=\t\xbe\x81/4\x0eh\x1e\x86\x94\xf5\xba\xdfd\r\xa3\xfd\xfc/\x92\x9bL+\xeb\x9aY,Wr\x87\xb6\x02\x1b\xfe\xec$\x14l\x7f\x95`\x8b\xb6\xdd\xe5|\xde\xfd\x15\xf2[\x82-.\xaf\xd2\xe1F\x93K0\xef\xb5\x18\n\xe5\"\x06\xdf\rkq\xb6>\xe0\x84\x15\xda\xea\t\xaf6\x985x\xf6\xf4\x19\x8a\bC\xcc\x1b\x1b\xd7\x80\x01P\a\xab\x97\t\xccb\x11\xe3\xb5\xc6\x85\xb9r\xb5\xc5\xe9_\x05Jz\x9f\xe1I(/g\x9c\x84f\xb9sN8P\xec\x98A\x9d\xd0\xc8\x87qY\x18\xf9\xe7\x80(B\b[\xc6\x06\xf3\f&T\x86\x9b\x9e%v\xce\x9e\x9e\"\x99h\x94e\xee\xbd\\\xaf\xad|)\xde*\xdaj\xd3M\xc5\xae\xb7\xde\xc4^\x96Pc\xe3\x89\xcaf\x12\xe4\xc3lC\xa9\x15\rS1\xad\xbb\v\xeb\x01\xa0b\xb1\xf14\x9f\xc2\xec\xeav\xcb|@\xcd\xfe7\x81\x85\xf3\t\xb4#\x9b\x1dqAM\x0f\xdaZG\xf8Y2`\xcc\v\xd7#\xb1\xcc\xa8\x145\xf0A2\x7f\xb4\xe5\b6\xb1\x8c\xf3\xa7\xe1)\x9a\a\xf4S%\xfc\xd0Z|0\xf4~\x7f\a=\xccXO~\x05\x16\xcbt\xc5Z\n*0\xdc\x9f1c\x86\x8f|#:\xd1\xff\xf8z,q\xccd3\xe9\xbd|2\t\xde\f\xba\x95R\xf5\xc7\xc0O$\xec\xcf k\xdbtUdS\x9d\xd6-eZ3\xd4\nPv`f\x8c0\xf7r\x02\x80\xd8l\x10NX\xd3\rl\xb6U\xb5\xc3\xe0f>\xbf\xdcS\xd4\x8f^X\x14\xe0\vU\xff\x8a\x91\x9f\xce7]\xfbKG\xd8\x9aY\x9f1\xa0\xd6\x12\x82z\x8fn\x11s\xeb7n\x11\x16\r\xdb\xc0\xd7\x9e:\x11\xd5\xa9\x9f\xa9\xc9\x8fU\x9e\xfe\xb1\xe0\xc3\x96\xd6\xda\"_\xba\xd0\xdc\x88\x0e\x92=k.\xd2\x89\x0e\xed\x82U\xbd/\x82\x96\xb8\xd6\x89v*\xa0.\x13\x99\x04[\xc0\xcb\xec\a\xec\x93\x7f.m\xfa\xc9`F\x05t\xe2\xe0\r\xc3\x92!\xa4\xa0Is\xfc\xb7\xbev\xe8{\xdf\xe6\xbc\x14\x05kZ\x86}\x051bGFZ\xce\xdd\xf5\xc9X%\xd7:\x9b\x11\x9d\x102\x95\xe72\xbf\xc3<\xab\xd6\xf1\x83\x1a\x9bu\x19\xba\x86\xab\xc9I\x93\xfe\x91\x8aT\a\xf7\xed\xa3d\x90\xd0\xc9j\x16\xd2v\x85\xe6]\x1b)\xa5\xbf#\xd5\xbc\xa2\xacM\"[8\x86\x907f\xe9\xf9\xb3\a\x85=B\x94z\x83\xe6\xd0\x1a\xa7\xed\x1c[\x02>\x8c'}, 0x317) 21:46:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x3) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0xcd805) 21:46:15 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x18) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 528.343896][ T32] audit: type=1400 audit(1590529575.532:23): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name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netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="680000001300010500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000034001600300001002c000c0052af9badfdcc645d0000000000000000000000001400010000000000200000000000000000000000140003006e657464657673696d30000000000000"], 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21:46:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x1000000000c, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001080)=ANY=[@ANYBLOB="08010805b9020000af03000004000000d60000000700000000000000000000002b"], 0x21) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 21:46:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) [ 528.955735][T14950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') lseek(r0, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x3, 0x3c) fcntl$dupfd(r3, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4fcfc94f74a8ea27abb47aa7d6702e42957e1f7b704f121787a475cccf170729c57b0f965abae1d20800875ae395f944a815bfd3de45e4b015ee656f695c963cda1ad4a0e6cbfc655c9dbcd1955cdc000e98bbfff117de08bc6e2f0b0f75e93134d5bed3b7fbf28b77c4611f3fb6556954aa73783143fcda64612d49784294196756f23974c200ac5c69f9be94fa72ca14d9ba07281b3cf3d923c0339f694671c4b0fb3297e0ac0407ca0842f790e2f506b08f1a4cd192aada7124aace8f3a1c4d9dfb587512277a2a66f9e99162d2f786c4", @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}]}, &(0x7f0000000180)=0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0xe) shutdown(r5, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040)) 21:46:16 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000040)) 21:46:16 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) dup2(r1, r0) 21:46:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/229, 0xfffffefa}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/102, 0x66}, {&(0x7f00000013c0)=""/236, 0xec}], 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) [ 529.406206][ C0] scsi_io_completion_action: 7 callbacks suppressed [ 529.406341][ C0] sd 0:0:1:0: [sg0] tag#3267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 529.423921][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB: Test Unit Ready [ 529.430620][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.440566][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.450539][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.460318][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.470224][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.480118][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.490012][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.499963][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.509865][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.519793][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.529690][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.539626][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.549525][ C0] sd 0:0:1:0: [sg0] tag#3267 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:17 executing program 5: unshare(0x24020400) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000240)) 21:46:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="91c33c0018000000000000003400000034000000000000004b65713ca905000006"], 0x0, 0x52}, 0x20) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:17 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) dup2(r1, r0) 21:46:17 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) dup2(r1, r0) 21:46:17 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x3) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0xcd805) 21:46:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') lseek(r0, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x3, 0x3c) fcntl$dupfd(r3, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4fcfc94f74a8ea27abb47aa7d6702e42957e1f7b704f121787a475cccf170729c57b0f965abae1d20800875ae395f944a815bfd3de45e4b015ee656f695c963cda1ad4a0e6cbfc655c9dbcd1955cdc000e98bbfff117de08bc6e2f0b0f75e93134d5bed3b7fbf28b77c4611f3fb6556954aa73783143fcda64612d49784294196756f23974c200ac5c69f9be94fa72ca14d9ba07281b3cf3d923c0339f694671c4b0fb3297e0ac0407ca0842f790e2f506b08f1a4cd192aada7124aace8f3a1c4d9dfb587512277a2a66f9e99162d2f786c4", @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}]}, &(0x7f0000000180)=0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0xe) shutdown(r5, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040)) [ 530.476782][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:18 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) dup2(r1, r0) 21:46:18 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) dup2(r1, r0) 21:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "c7404c020b26a3335a5d11ab80ac4de6313fae18ff5762858bafa0d0dfcec5ef", "278c64de3f9a40895e1aaee76ea1a6ca6032e72ebaf6d600a85136f1c55f38db", "027879be41a2d72260cb045f754b4e3e41c87ae671359f895738adbed2e1c1e0", "5fef8972220e7a74009f451c0c9535db08584bae3484dd31df3353266a6b6196", "5fcdf58830cf55ad1027b8f415263ad72ad46d1d03e3ed0e83d5706b252e6906", "ebbfdd430bc43254510ee2ff"}}) 21:46:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x3) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0xcd805) 21:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "c7404c020b26a3335a5d11ab80ac4de6313fae18ff5762858bafa0d0dfcec5ef", "278c64de3f9a40895e1aaee76ea1a6ca6032e72ebaf6d600a85136f1c55f38db", "027879be41a2d72260cb045f754b4e3e41c87ae671359f895738adbed2e1c1e0", "5fef8972220e7a74009f451c0c9535db08584bae3484dd31df3353266a6b6196", "5fcdf58830cf55ad1027b8f415263ad72ad46d1d03e3ed0e83d5706b252e6906", "ebbfdd430bc43254510ee2ff"}}) 21:46:18 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) dup2(r1, r0) [ 531.364585][T15045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x18, r3, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}}, 0x0) 21:46:18 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) dup2(r1, r0) 21:46:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') lseek(r0, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x3, 0x3c) fcntl$dupfd(r3, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4fcfc94f74a8ea27abb47aa7d6702e42957e1f7b704f121787a475cccf170729c57b0f965abae1d20800875ae395f944a815bfd3de45e4b015ee656f695c963cda1ad4a0e6cbfc655c9dbcd1955cdc000e98bbfff117de08bc6e2f0b0f75e93134d5bed3b7fbf28b77c4611f3fb6556954aa73783143fcda64612d49784294196756f23974c200ac5c69f9be94fa72ca14d9ba07281b3cf3d923c0339f694671c4b0fb3297e0ac0407ca0842f790e2f506b08f1a4cd192aada7124aace8f3a1c4d9dfb587512277a2a66f9e99162d2f786c4", @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}]}, &(0x7f0000000180)=0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0xe) shutdown(r5, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040)) 21:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "c7404c020b26a3335a5d11ab80ac4de6313fae18ff5762858bafa0d0dfcec5ef", "278c64de3f9a40895e1aaee76ea1a6ca6032e72ebaf6d600a85136f1c55f38db", "027879be41a2d72260cb045f754b4e3e41c87ae671359f895738adbed2e1c1e0", "5fef8972220e7a74009f451c0c9535db08584bae3484dd31df3353266a6b6196", "5fcdf58830cf55ad1027b8f415263ad72ad46d1d03e3ed0e83d5706b252e6906", "ebbfdd430bc43254510ee2ff"}}) 21:46:18 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0105303, &(0x7f0000000280)) 21:46:19 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x3) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0xcd805) 21:46:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "c7404c020b26a3335a5d11ab80ac4de6313fae18ff5762858bafa0d0dfcec5ef", "278c64de3f9a40895e1aaee76ea1a6ca6032e72ebaf6d600a85136f1c55f38db", "027879be41a2d72260cb045f754b4e3e41c87ae671359f895738adbed2e1c1e0", "5fef8972220e7a74009f451c0c9535db08584bae3484dd31df3353266a6b6196", "5fcdf58830cf55ad1027b8f415263ad72ad46d1d03e3ed0e83d5706b252e6906", "ebbfdd430bc43254510ee2ff"}}) 21:46:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x4b6b, &(0x7f0000000000)) 21:46:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x781882, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f03000000450001070000001419002b000a00010005000000006e0000000000000000010400", 0x39}], 0x1) [ 532.262752][T15075] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 532.271475][T15075] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 532.430993][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x80000000004, 0x8000000007}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xdd, 0x4, 0x6, 0x5, r1}, 0x40) 21:46:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100001040000400000f7e5ff00000000", @ANYRES32=0x0, @ANYBLOB="db80833c000000003800128008000100736974002c00028008000200ac1414bb08000300ffffffff06000d0005000000080002007f000001060008001f000000080004000100010008000a0052a458af6e5652c2d3ada4edae7fbff2bb7d32ebf3250e366af7116594cb0b1d8be38c716a89681fa4502186436defd9b32c320106fb"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 21:46:20 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x8, 0x2000000021d, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) [ 533.154481][T15092] IPv6: sit1: Disabled Multicast RS 21:46:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000100)) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 21:46:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') lseek(r0, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x3, 0x3c) fcntl$dupfd(r3, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4fcfc94f74a8ea27abb47aa7d6702e42957e1f7b704f121787a475cccf170729c57b0f965abae1d20800875ae395f944a815bfd3de45e4b015ee656f695c963cda1ad4a0e6cbfc655c9dbcd1955cdc000e98bbfff117de08bc6e2f0b0f75e93134d5bed3b7fbf28b77c4611f3fb6556954aa73783143fcda64612d49784294196756f23974c200ac5c69f9be94fa72ca14d9ba07281b3cf3d923c0339f694671c4b0fb3297e0ac0407ca0842f790e2f506b08f1a4cd192aada7124aace8f3a1c4d9dfb587512277a2a66f9e99162d2f786c4", @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}]}, &(0x7f0000000180)=0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0xe) shutdown(r5, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040)) 21:46:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x80000000004, 0x8000000007}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xdd, 0x4, 0x6, 0x5, r1}, 0x40) 21:46:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x14c, 0x24, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 21:46:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x80000000004, 0x8000000007}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xdd, 0x4, 0x6, 0x5, r1}, 0x40) 21:46:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x0) 21:46:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x80000000004, 0x8000000007}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xdd, 0x4, 0x6, 0x5, r1}, 0x40) 21:46:21 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x300a, 0x7, 0x7}}) 21:46:21 executing program 3: set_mempolicy(0x4003, &(0x7f00000008c0)=0x101, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x80005) [ 534.245601][T15120] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:21 executing program 2: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x3ab8a9c8335301e) 21:46:21 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001980)=""/193, 0xc1}], 0x1, 0x0) 21:46:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x11, 0x800000003, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@dev}, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 21:46:22 executing program 3: set_mempolicy(0x4003, &(0x7f00000008c0)=0x101, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x80005) 21:46:22 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xd, 0x0, 0x0, 0x1, [@generic="b0cf78d1850818c5f1"]}]}, 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537b22ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:22 executing program 0: unshare(0x2000400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x2) 21:46:22 executing program 2: set_mempolicy(0x4003, &(0x7f00000008c0)=0x101, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x80005) 21:46:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, 0x0, 0x44}, 0x40) 21:46:22 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x82102, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000380)="5ab726ec46d6a7f0", 0x8}, {&(0x7f00000003c0)="f724d4402bd819817e185216448ee35dfc52ceddffe4a280c16d9e1149fcfc98124af28b549301ab4ffcd1fc0a531deaf58d5634b2511b4730df89c4cc914ad534fcff6fef3bd746527b129d02", 0x4d}], 0x2) 21:46:22 executing program 2: set_mempolicy(0x4003, &(0x7f00000008c0)=0x101, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x80005) 21:46:22 executing program 3: set_mempolicy(0x4003, &(0x7f00000008c0)=0x101, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x80005) 21:46:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000440)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000480)='./file1\x00', 0x0) 21:46:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r3, 0x0) 21:46:22 executing program 3: set_mempolicy(0x4003, &(0x7f00000008c0)=0x101, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x80005) 21:46:22 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x10d, 0x5, &(0x7f000079bffc), &(0x7f0000000000)=0x4) 21:46:22 executing program 2: set_mempolicy(0x4003, &(0x7f00000008c0)=0x101, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x80005) 21:46:23 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000240)=0x6e, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21:46:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r3, 0x0) 21:46:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 21:46:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000004c0000006f00000000000000c5000000000000009500000000000000ed62362514439e569485c223520a3523e7c2d3c050bb43500220f93b333a4cbe7001e28027519611602174e34735df1209c798f5ef7409ad7428a42540223f01c0dea937670805cdf89114bc0ea4f4a29d0dc1ffa52fb566e5044c1c84c3d15f60f98e7c7aaf5a9d38f7cac33875104d41d1d66c1ec7232048baa683b85880a485df5fba6d638679705f18e8e4381a9bb2e312f86a058371278a"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) 21:46:23 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/664], 0x1a3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r2 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x2, &(0x7f0000000100), 0x4, r1, 0x6}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) 21:46:23 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 21:46:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="82", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r2, 0xfffffffffffffffd) [ 536.289708][ C1] sd 0:0:1:0: [sg0] tag#3268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 536.300516][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB: Test Unit Ready [ 536.307187][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.317077][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.326905][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.336775][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.347320][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.357153][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.366983][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.376804][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.386610][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.396425][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.406275][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.416096][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.425932][ C1] sd 0:0:1:0: [sg0] tag#3268 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r3, 0x0) 21:46:23 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/664], 0x1a3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r2 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x2, &(0x7f0000000100), 0x4, r1, 0x6}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) 21:46:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="82", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r2, 0xfffffffffffffffd) [ 536.878352][ C1] sd 0:0:1:0: [sg0] tag#3269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 536.889097][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB: Test Unit Ready [ 536.895857][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.906653][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.916497][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.926334][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.938113][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.947981][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.957814][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.967642][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.977453][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.987305][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.997145][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.009320][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.019147][ C1] sd 0:0:1:0: [sg0] tag#3269 CDB[c0]: 00 00 00 00 00 00 00 00 [ 537.027011][ C1] sd 0:0:1:0: [sg0] tag#3270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 537.037616][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB: Test Unit Ready [ 537.044314][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.054132][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.063920][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.073725][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.083535][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.093854][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.103683][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.113530][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.123435][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.133293][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.143145][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.152991][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.162836][ C1] sd 0:0:1:0: [sg0] tag#3270 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="82", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r2, 0xfffffffffffffffd) 21:46:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x70742a85, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x0, 0xfffffdfd}, @flat=@handle}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 21:46:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r3, 0x0) 21:46:24 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000240)=0x6e, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21:46:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="82", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r2, 0xfffffffffffffffd) 21:46:24 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/664], 0x1a3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r2 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x2, &(0x7f0000000100), 0x4, r1, 0x6}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) 21:46:24 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCATTCHAN(r1, 0x4020744f, 0x0) [ 537.798675][T15236] IPVS: ftp: loaded support on port[0] = 21 [ 537.823946][ C0] sd 0:0:1:0: [sg0] tag#3271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 537.834652][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB: Test Unit Ready [ 537.841405][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.851734][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.861632][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.871562][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.881480][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.891389][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.901464][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.911307][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.921209][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.931077][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.941012][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.950864][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.960707][ C0] sd 0:0:1:0: [sg0] tag#3271 CDB[c0]: 00 00 00 00 00 00 00 00 [ 538.596653][T15236] IPVS: ftp: loaded support on port[0] = 21 21:46:26 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 21:46:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 21:46:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x90002}) 21:46:26 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/664], 0x1a3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r2 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x2, &(0x7f0000000100), 0x4, r1, 0x6}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) [ 539.395241][ C1] sd 0:0:1:0: [sg0] tag#3272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 539.405860][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB: Test Unit Ready [ 539.412598][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.422473][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.432345][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:26 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 539.442234][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.460649][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.471641][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.481516][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.491402][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000240)=0x6e, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 539.501260][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.511072][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.520963][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.530826][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.540682][ C1] sd 0:0:1:0: [sg0] tag#3272 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x90002}) 21:46:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x90002}) 21:46:27 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty={[0x2]}}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x15) 21:46:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x90002}) 21:46:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB="000004000000000008000a00", @ANYRES32], 0x4}}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r9, 0x0, 0x4ffe0, 0x0) [ 540.890553][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 540.970949][ T21] tipc: TX() has been purged, node left! 21:46:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0f40"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:29 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 21:46:29 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:46:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x3, 0x2e, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x0) [ 542.652712][T15356] device veth2 entered promiscuous mode [ 542.689870][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.716287][T15363] device veth4 entered promiscuous mode 21:46:29 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000240)=0x6e, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 542.804590][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:30 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 21:46:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 21:46:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="0f20e035800000000f22e4f30fc7fd0f01ca66b86d000f00d0b9800000c00f3235001000000f30f3df410e670fc79f0400660f38dd4b58b9600600003e660fc73419ba000000000f30c4e2359ada", 0x4e}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:46:30 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1d}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x3c}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 21:46:30 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xd, 0x4, 0x4, 0x20000004, 0x0, r3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 21:46:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) 21:46:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6074, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e000000880305fb0a000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) [ 544.183885][T15405] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 544.248262][T15402] IPVS: ftp: loaded support on port[0] = 21 21:46:31 executing program 1: unshare(0x400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 545.650348][ T21] tipc: TX() has been purged, node left! 21:46:33 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 21:46:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @pix_mp={0x0, 0x0, 0x35315852}}) 21:46:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x6d, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 21:46:33 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 21:46:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)={0x10, 0xfffffffffffffff5, 0x2}, 0x10) 21:46:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 21:46:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000240)={0x0, 'team_slave_0\x00', {0x1}, 0x100}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3fb) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000003c0)={0x2, 0xac3, 0x5, 0x1, 0x3, 0x3fc}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="60d29ca4007c96a2fb1bc0513b9e1346f8bf2156ce233f731171eea9b34056b276d2ef128dc94d2a5032124262b4cfda2cf284", @ANYRES16=r1, @ANYBLOB="00040200700000000000043603f05c419472ae985126c8d8ec00095ae2f67700000800010000000000080002000200000008000100420000000800010002000008000000000000ed0008000100000000000000007f0000000008000100000000000800010002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4094}, 0x20004000) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000300)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat(r5, &(0x7f0000000080)='./file0/file0\x00', 0x40000, 0x101) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000140)=0x44) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x7c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x615ed, 0x9400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_MASTER={0x8}, @IFLA_PHYS_SWITCH_ID={0x24, 0x24, "b16ad2a7c4b3143ff80b60d4c9d8a4ff844e5219e55b416929ecf470c5c36949"}, @IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x7c}}, 0x0) 21:46:33 executing program 3: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4008ae6a, 0x0) 21:46:33 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, 0x0, &(0x7f0000000100)=0x1700) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) [ 546.865456][T15402] IPVS: ftp: loaded support on port[0] = 21 21:46:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) 21:46:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xf) write$USERIO_CMD_SET_PORT_TYPE(r1, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000080)={'bridge_slave_0\x00', @ifru_flags}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000940)=""/102400, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0x0, r6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x1b}, 0x4d, r6}) 21:46:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) [ 548.171714][T15500] IPVS: ftp: loaded support on port[0] = 21 21:46:36 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) chmod(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:36 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2200001, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) 21:46:36 executing program 2: unshare(0x2000400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 21:46:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:46:36 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x13c, 0x10, 0x613, 0x0, 0x0, {{@in6=@mcast1, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(ccm(xtea))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 21:46:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="ae4a56b3b0002ec93b60059e06755476cb57c8e19ebf7e5eff0f03314330e27c0f5fb9bc407a9175", 0x28}], 0x1}}], 0x1, 0x0) [ 549.950851][ T21] tipc: TX() has been purged, node left! 21:46:37 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 21:46:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xb1, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b3372"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:46:37 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x400000}}]}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 550.130461][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 550.227163][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) 21:46:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 21:46:37 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)='G', 0x1}], 0x1) 21:46:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) 21:46:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) [ 550.753395][T15588] IPVS: ftp: loaded support on port[0] = 21 [ 550.771819][T15583] nfs: Bad value for 'source' [ 550.777057][ T32] audit: type=1326 audit(1590529597.962:24): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15586 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 21:46:38 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 21:46:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) [ 551.026583][T15607] nfs: Bad value for 'source' 21:46:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 21:46:38 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x2c, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_macvtap\x00'}]}}]}, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 551.174428][T15624] nfs: Bad value for 'source' 21:46:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r0, 0x400454cb, &(0x7f0000000200)={0x0, 0x0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) [ 551.310750][T15629] nfs: Bad value for 'source' [ 551.315889][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 551.458510][T15636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 551.547595][ T32] audit: type=1326 audit(1590529598.732:25): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15586 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 552.510978][ T21] tipc: TX() has been purged, node left! [ 552.680449][ T21] tipc: TX() has been purged, node left! 21:46:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xb1, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b3372"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:46:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x5608, &(0x7f0000001400)) 21:46:40 executing program 2: r0 = memfd_create(&(0x7f0000000180)='!V\x12\x0e`\xff\x18\x0e', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd2, 0x0, &(0x7f0000000000)=0x3) 21:46:40 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') sendfile(r0, r1, 0x0, 0x50000000000443) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xfecf, &(0x7f0000000180)=0x2) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x40, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x25}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x300000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 21:46:40 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}, {{&(0x7f0000000040)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0x10, 0x1, 0x3d}], 0x10}}], 0x2, 0x0) 21:46:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @loopback}], 0x10) [ 553.262097][T15670] IPVS: ftp: loaded support on port[0] = 21 21:46:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x58}}, 0x0) [ 553.401834][T15678] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 553.458214][ C0] sd 0:0:1:0: [sg0] tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 553.469003][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB: Test Unit Ready [ 553.475835][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.485682][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.495555][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.505626][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.515449][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.525289][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.535150][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.545097][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:40 executing program 2: r0 = memfd_create(&(0x7f0000000180)='!V\x12\x0e`\xff\x18\x0e', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd2, 0x0, &(0x7f0000000000)=0x3) [ 553.554932][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.564766][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.574631][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.584576][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.594487][ C0] sd 0:0:1:0: [sg0] tag#3273 CDB[c0]: 00 00 00 00 00 00 00 00 [ 553.705930][T15678] IPVS: ftp: loaded support on port[0] = 21 21:46:41 executing program 2: r0 = memfd_create(&(0x7f0000000180)='!V\x12\x0e`\xff\x18\x0e', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd2, 0x0, &(0x7f0000000000)=0x3) [ 554.219010][ C0] sd 0:0:1:0: [sg0] tag#3274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 554.229649][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB: Test Unit Ready [ 554.236400][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.246239][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.256085][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.265934][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.275881][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.285731][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.295598][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.305469][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) [ 554.315312][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.325168][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.335017][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.344899][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.354768][ C0] sd 0:0:1:0: [sg0] tag#3274 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:41 executing program 2: r0 = memfd_create(&(0x7f0000000180)='!V\x12\x0e`\xff\x18\x0e', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd2, 0x0, &(0x7f0000000000)=0x3) 21:46:41 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') sendfile(r0, r1, 0x0, 0x50000000000443) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xfecf, &(0x7f0000000180)=0x2) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x40, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x25}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x300000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f71d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f7bc830a34b0beb233e0e40d89147bc67990d3b754ca3b88608f2ea4b1fcd"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) [ 554.399036][T15731] IPVS: ftp: loaded support on port[0] = 21 [ 554.670356][T15743] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.727536][ C1] sd 0:0:1:0: [sg0] tag#3275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 554.738252][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB: Test Unit Ready [ 554.745007][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.754857][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.764741][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.774656][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.784503][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.794383][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.804285][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.814208][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.824173][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.834054][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.843920][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.853762][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.863612][ C1] sd 0:0:1:0: [sg0] tag#3275 CDB[c0]: 00 00 00 00 00 00 00 00 [ 554.943942][T15743] IPVS: ftp: loaded support on port[0] = 21 21:46:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xb1, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b3372"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:46:43 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="ff1200fd0000000000000000000000000000000000000001ff01000000000000000000000000000189d65d56035c7f5eb6d54a7738b5a3bdfe8077c2204e8e49bcb7527f3e5e0d78bd7c00000000000000000000ffffe0000002ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff00000006"], 0x98) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x5c, &(0x7f0000000080)=[{&(0x7f0000000140)="b1918600", 0xfdaf}], 0x1}, 0x48040) 21:46:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7e, 0x0, [0x488], [0xc1]}) 21:46:43 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') sendfile(r0, r1, 0x0, 0x50000000000443) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xfecf, &(0x7f0000000180)=0x2) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x40, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x25}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x300000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 21:46:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x3, 0xf}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 556.475135][T15798] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc3, &(0x7f0000000100), &(0x7f0000000080)=0x4) [ 556.527793][ C1] sd 0:0:1:0: [sg0] tag#3276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 556.538521][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB: Test Unit Ready [ 556.545252][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.555098][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.564981][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:43 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="ff1200fd0000000000000000000000000000000000000001ff01000000000000000000000000000189d65d56035c7f5eb6d54a7738b5a3bdfe8077c2204e8e49bcb7527f3e5e0d78bd7c00000000000000000000ffffe0000002ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff00000006"], 0x98) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x5c, &(0x7f0000000080)=[{&(0x7f0000000140)="b1918600", 0xfdaf}], 0x1}, 0x48040) [ 556.574900][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.584904][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.594783][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.604687][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.614542][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x909af43fe55ef001, 0x0, 0x0, {{{@in6=@ipv4={[], [], @empty}, @in=@multicast1}, {@in=@multicast2, 0x0, 0x33}, @in=@multicast1}, 0x9}}, 0xf8}}, 0x0) [ 556.624397][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.634273][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.644144][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.654038][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.663833][ C1] sd 0:0:1:0: [sg0] tag#3276 CDB[c0]: 00 00 00 00 00 00 00 00 [ 556.758481][T15798] IPVS: ftp: loaded support on port[0] = 21 21:46:44 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="ff1200fd0000000000000000000000000000000000000001ff01000000000000000000000000000189d65d56035c7f5eb6d54a7738b5a3bdfe8077c2204e8e49bcb7527f3e5e0d78bd7c00000000000000000000ffffe0000002ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff00000006"], 0x98) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x5c, &(0x7f0000000080)=[{&(0x7f0000000140)="b1918600", 0xfdaf}], 0x1}, 0x48040) 21:46:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4b, 0x18}}) 21:46:44 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) 21:46:44 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="ff1200fd0000000000000000000000000000000000000001ff01000000000000000000000000000189d65d56035c7f5eb6d54a7738b5a3bdfe8077c2204e8e49bcb7527f3e5e0d78bd7c00000000000000000000ffffe0000002ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff00000006"], 0x98) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x5c, &(0x7f0000000080)=[{&(0x7f0000000140)="b1918600", 0xfdaf}], 0x1}, 0x48040) [ 557.415554][T15829] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 557.710673][ T21] tipc: TX() has been purged, node left! [ 557.870749][ T21] tipc: TX() has been purged, node left! [ 558.030338][ T21] tipc: TX() has been purged, node left! [ 558.211995][ T21] tipc: TX() has been purged, node left! 21:46:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xb1, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b3372"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:46:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0) 21:46:46 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') sendfile(r0, r1, 0x0, 0x50000000000443) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xfecf, &(0x7f0000000180)=0x2) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x40, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x25}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x300000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f71d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f7bc830a34b0beb233e0e40d89147bc67990d3b754ca3b88608f2ea4b1fcd"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 21:46:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) connect(r0, &(0x7f0000000140)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000b3fb00000200000000000000", @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) 21:46:46 executing program 5: unshare(0x8020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = mq_open(&(0x7f0000000640)='\xab\x0f\xfd\xf7\xbfH\xdc\x86B\xb5)L6\xc8Y\xde\xc4P5\x88\x98\xfe\x908J\xbf\x1c\b\x10\xc1\xae\xc0\x04[\x9aG,Q3`_\x1aF\x12\xe6a\x0e\xd28\xde\xf0Wa\x93\xe2g@\x1c\x9f\x9e{\x01I\xd2\xda\xd1V\xf4\x03\x90f\xcd\x02\xc4<@\x8c\xefS\x14\xc3\x853(XF\x7fQ\xa3?\x9eT\x17\x8d}\xe8\xbd\x0eQ\xd4\bo4\x14\xaa\xfa0l\xcbm:\x1eav\xcd\"\xae\x8f\xd9\xb3\xfc4c\xb3X\xbe:\x87*\xa6\xcd\x02\x8d', 0x42, 0x0, 0x0) close(r2) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') setns(r3, 0x0) 21:46:46 executing program 2: unshare(0x28020400) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000080)) [ 559.567437][T15873] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 559.620186][T15882] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 559.639694][ C0] sd 0:0:1:0: [sg0] tag#3289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 559.650337][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB: Test Unit Ready [ 559.656947][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.666881][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.676761][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.686587][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.696435][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.706276][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.716145][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.726010][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.735842][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.745684][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.755645][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.765479][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.775313][ C0] sd 0:0:1:0: [sg0] tag#3289 CDB[c0]: 00 00 00 00 00 00 00 00 [ 559.800278][T15890] bond0: option fail_over_mac: unable to set because the bond device has slaves 21:46:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x51424752}}) 21:46:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) 21:46:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x7, 0x32}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x44, 0x0, "aab48952f680badf61076dc6556ae1ec56eb31f3c6550a54d9a618135bb70495202fb29ad7f347ac9868035736e3429d17263c05c10f21792b4a34a0fcbb3cc0bc64b50000000028b4d100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 21:46:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x80, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xe}}, [@filter_kind_options=@f_bpf={{0x41, 0x1, 'bpf\x00'}, {0x54, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0x6, 0x7, '.\x00'}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8}]}}]}, 0x80}}, 0x0) 21:46:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)="6651070000053c27bc3376003639405cb4aed12f0000001500a347a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06b7e72865a30fd15d018501dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b8b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931037cd2157df6b2bcb47fb53455560e8ef00f8a4fafa924edfe92175aaa1c4ecc7a404d7dd4168d5294215e301fc1b14f94161e9f462821551e9e41e299b332c2344b246a785e031714370bf7188e34bc051960ddfef7086eefc627b9f2466d000fc0e3f0abf58abe4483dc012423c5f83e968a30c2f34fd426ca0f433eb5178203f7f41e76e86134e850075e1ac1e9e2e189f5098671d6f92dd39c7fc46fddd2dfafb9888528f08ea6df320a59c2e404fb5318b889351485fd35bcce", 0x147}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:46:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) [ 560.624062][T15906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:46:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0045540, &(0x7f0000000080)={0x2}) 21:46:49 executing program 3: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x82, 0x0, &(0x7f0000000000)) 21:46:49 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10000000000010, 0x0, &(0x7f0000000080)) 21:46:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 21:46:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents(r0, &(0x7f00000000c0)=""/51, 0x33) getdents64(r0, &(0x7f0000001100)=""/4082, 0xff2) 21:46:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 21:46:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 21:46:50 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x23, 0x0, 0x0) r4 = dup2(r3, r2) dup3(r4, r0, 0x0) 21:46:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001680)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x7c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf77}]}]}, 0x7c}}, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 21:46:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 21:46:50 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = socket(0x11, 0x3, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x7}) bind(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4e68d5f8) 21:46:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000580)={0x8, @raw_data="f191e1f503dac2db0f4dca7658ed46e6820372ccd63cd5d227d97b47cfecfad51d7d353b9255b6fb19a693d1b311db4c2ed049c7114cb11078cbf7c27063477a38224d17a8f3cd059da66c7beb860763a888a5f41edef434c0415715725a2b2b1285f8e18562c1c1a5c3954eb1f67680f3a79ce8e7ed2903f6180cca414a14b45be184228f6328e0b92f1e2c536d0185a9b676d9ee3596424b7047cda7d73b4a83054b1b1894c8b17d60da56142d8cbc88a88807374a4ed10b66779bdc047095f042b3fc336c8feb"}) 21:46:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 21:46:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000040)='6', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:46:50 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = socket(0x11, 0x3, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x7}) bind(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4e68d5f8) 21:46:50 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 21:46:50 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @local, 0x0, 0x2, [@multicast1, @dev]}, 0x18) 21:46:50 executing program 1: alarm(0x7) alarm(0xfffffffffffffffe) 21:46:50 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x20002154}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 21:46:50 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = socket(0x11, 0x3, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x7}) bind(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4e68d5f8) 21:46:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000040)='6', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:46:50 executing program 0: shutdown(0xffffffffffffffff, 0x0) 21:46:51 executing program 1: r0 = epoll_create1(0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ppoll(&(0x7f0000000580)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x8]}, 0x45c) 21:46:51 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x119, 0x7, 0x0, 0x300) 21:46:51 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = socket(0x11, 0x3, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x7}) bind(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4e68d5f8) 21:46:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000040)='6', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:46:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x407, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}}, 0x0) 21:46:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0xd000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffeac) 21:46:51 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 21:46:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000040)='6', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:46:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x9, 0x7) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000080)='?', 0x1}], 0x1) 21:46:53 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "074dc72464e2ef7303e1ce79318a357db3da2abdb3eed95da4edbf2199a67e8f1441e95ec06e937babc4d77b08583c1da4edeca6103377bbd0e6d1488ba20b06fbde1c34f04eff7c9d8d5eccc7e8cb8b53862e772f358f034f57fcebacd1cdae7c7eccf273b97814f82054e8e50d0cf531c05c2e5b31ab49da98aaeaa2f20b7359b54583c05b7339d99d35c4459a6a609b486c4d150fd981b3b33a2d2f1e509faf9e380aedce80883e0ef04c193c9a38ab6d40033809cc5bd35d01e1a6b2d92028a3386e07b63d998e467c7eee7d10c0288bfc08a86f6eeeb6113995653521e03f8e915fa572b79b33d0af64aa9bcc8c5f2e9281578179ebc9b1edfef5ce11c5f04b4021536978b85a8dac92cfa24784ad483c2dc648cd77c25f331f5992f9c3a406ae51b6299b0c2ad65e3372a15b25775c27f6393cf1f2b770e4d807dd252a3941bc15c14e0a633416e33388a4b97c2d0be1f4b1379393d00f48f13d1b57391924f5af5334489c4b914d3d38a04e3aa77cec3d0d7a80000449709de721496468b8a59160760e61d9a92f37d60e2da8e722374112a2c068691cd8757a549b0e75e93e8586fbd6df5caabdfed6ba684a7575a1dc1fa00a556ba52c1c31ecab69b55a9e0228a7e20c804680b68efd7dcd3279ea5040676ad566d836b869a5cf16066b41d410c02b306ca6a985d2bbcecc716488063f32f7953eafee69c6d4416b3ff6741962a610f7cfd868d34cdca50b7e2ec1bd3e689c08792763d9e52001428a75f2cf3bb51c3bd8f9280e82ba7e2c27883980ecc9a2d44c645f1b50410ec2cd91aca62f5abc381c854c5ec742c6f00cc2bb5053d9e648b16484ce072c81c1c9f43046d7a0ab96749f887a7b73990a1344e2a99d2d91ec8a0bb3e6e4b72f627b90dbadaba0f52cc5dcc478f5233eed51545fb5c4d732de48abf2bbd9e114298704572890111e5df5c8e99f5d45dfee95a4616eba16fe2536599569d0a369e4c84267159698b50275c08e112a3de1dd291189f933d3f0bda42b3123a89970d78378fdaaabb4a044729b9c7c53d4066a5e72b957e3e942dee3a6d4d9a3225a7d6baa6e76d4bfba35a42ffc08a6600cecd880f9ad232f01e354d0b90f8525fcceaeb69cc8747b022a4ef5a65157f6e12acd867d9b3faaa3d34d118e8d44a49bbdbbb8e8def3a464d5a5fcc90ab61cce6df15f130328a94685ea0983412cd907b73c4ce40fbacb9240d55df654714fb02e090622f68ea5176ef6a8bee20d75363d11c29599d2393abcc3e83e26873fdca7bfa38615ea9d92ad9daab4cc561b4e782e0e6a2004cf3a66f52bde7a5f935d423569f9085f23a5ef6c3eba26bbb57ff9138a53b5a203b349b78497ce0a1ede1061b57f74901799ba4ce65d763374a14a95cea3e9704234ca66d4620831d64257fababa0f4c6b1d0a604a1116d0eee27c549df83f52b9c89e89a1a5aa940c6dcff20d868e16de1426dbd04c2df452c9c14777832154063b822ad486470c03f32f479906dd2fdf51680285ae10f7260de7960f5a8d5b6ada1079f796614812710c2143be2710ea39a38493668fdef8870d64667875aa38a0155e52dcd01ed1e486e5fd0a227756d40b683837dc7573913aa3fbd55eababe0ef671eb7419c8ba15ec64a428162740e872023048e679502aa386c4ab66fa6d5ae32e9087c0e1c0b5a3bea5ebefaea17ebca79fae6a6e154273765afd1a80bba198ef5b9369a54c0933df533f1e234f03d546b6a7b853a8159a13d632b1585435e96115f52997162f39ef58468c0a2217c75588f3ce946ffc95c51e24a216bc913d349ea6f5bb0dd7820b60bb35650dffff71f0a754dfef136115a221c26cce18ae66ae2766ad52ff3d3d070b6f545c3e0ad5cf82fe17cda76a74443b192d023c4049e0101e4fd916b594f663e779e49beb74ed13a84a38fdcb68fb992e6cb1fddd3809b0df0ebe4608d5d139ca5ab1cf4e5186262f51a9f923d82c57e9e798023010e8a8ed2569e5fc1209615084e7e2e01f5abfbe537485c16ae293526c749b383ea2dbbab3603f4094b6f725fb52cbfb8b62b355516d447a720f9198a8c2bed49c1ce6c35570f5d2d595b3e76c079b0c24dd7c6abd192d155d28e052b1df0b3269291f2bb62e140fd28524dc8a733e0084addb56ee8ea910109168838fb0816a854d3efcf47883432565a426ec65a35528d70a524dbaaf002736baeb6099a97838fed15942c0f53ec91cfb333bf862d7043e015eb0c1fc5c277bae1f9290f2ab41064290523d4d4306154901dafda830f15b4d2f0c779e609528eb8f8403cd25f5cf86546f17282e93d1dd071faf1fbae1fad8f5fb9ac2bd8117f67a2e02e47c96c606e65e849e72c4360f45defe283a8af1f81b5df3d346e1caef27fe25ff8259757f40e574469a0d4d53a1f5f6bce47e97a0cb33243675a82c119abffca8b1294864907399dba45b143716f5e989326809e43e0c791b35803b707e957b0e0ce798f74514d2f581c9754f07a39a411d62b21f988be0c1aac47dfc2f49e5665ca11c7ecd27942257b60c7107350e7d38fa33a7ad0236ebf99e227034e28e0e82b0bc40af9e56ee7e535654ee2a647ee02ee0a734f1585b0904fbce439771e1c3fd09679864dffbeba46e07b841aa68583434c4d6f04ec312613ab75fbe6c2aeccf9841083ce3f9a9c1405e509d73f34f26ad24663382884dd0c59449c5285d765909618658ead80fc49c874ad65c1dca3c19c41ea405ff12b6ff5f2c581b3e621aab1037f474b9783d55b2590c9a11646f6d2db979e33faf95a67bc053f3d3e4fe3f76af79793d1c56d1e66c5c8f3b0a374f77b64a7ccda3d0a30e1eaf08199a2b00f70997e2653d4ef18c0566885b1d67a7575ab9aaa450745cc7ab8c4ed27fc04e6cc2f8cb216661cba3e77215e0e1bf5471c03a6c1ea457579519d9f3e30955e1070d1df819b18f5209dc3c8d8a23603d16fdb8bb6c3ba743b906bd35a6d8193e1c6d6315582d9e39d848c6c5727671c85046171de01c8d0cf18768d304fd956321c95f7391f878056193c551c143b3c9fa9eb2dbe410d08c2bceea46ec3c4e07f6672728b1415acbf8d042280f61a46a5812585546ff8b62ac19dbc8f75ec07eaa264bf1490527f0013a29f04c2fbd57da2cbf92d54e9128d5365cd9c00733e5c18cd0a211c37172bd8b7f73beb5efd735624a4c36be244d5c047f30fbd1d03e35d64ae8ef81e9dff8ed1cc732948c232c450d7b2956f82e298a2b560ab492e6e83ccf0044b1add7fecda23923411761099fe72f40c982736653d42ac71a3a13e4e56a060069b89e6e9af353264b033a1f0386393da9ed0fd0af474a8a71bc57722bd0be4d25a0f65b5ca0fe43198a28c6a84e34c02cab8a59123e3d221392e08587da49659618fe143695e61c0f314d0033f03b6d201ae83a4421c3e481fff47988e5915a4777356a563359371b1ce53cf7cf8231c63d190f804233fbfc6b1c02ccf25430eb5d832aedb444112b939555aa750f03ba3fdf5fbf9654dd1bc7fe600700a93c969eff7972ba4028e6a4585c050f58ffe29915bc82b3ccea17bf515d8e5d125bfb4aab8822508d0b27eb944ce9dc39fba681490c40f85b394d4fac5b10b9c6e356acaa7736144cca7a21b090621ffeafda58199852b1862e11808e108319244b97ab78dfb2e31f34fe69b1da3f6227a9d11cb6ad1d930ced514c0a43b6e5eb667c9b69053737a257f21903a23bd6850ec18278a1d7ab837e0357f6fbbf636f9b21e84f71db281f2ee17804a0bfe3f8edccfdbe17ee2a78ef61e0385a2e3c09fcfc8224c476c1abe744bf16f2224451cd018b204c278bda3150493942a01d27afdff01561d655c4aa6db4cb5229dad260bde85f1a83c0b941b69ec55eb52e06f77bcfa173151167a890e5b29d22d2f4ca1d12cabe63c9968c66eeaacf732dc09a4aae81f60eaab33e9e721773b5e39401d76df6c563fb57ebcba695ba88db254f13a682733641447ae6a519c91aa39f15847f81e0d41fe443fe6ff34d610431c2215d159507c6703c0df8b5f05acf5fe27fe4f77d5ef3dee1052c9f88251841b983b10593b9e4c5a17974684f51221f425e9ac4f3309d4256fad90140613c1b36ac9971465400ced495745196e2eeb4392d955ea34605ff3969056cfa0ac5f462a66b5c491b3150b3f2ac0f4bd05769b3ea0c52c40bb15c2da3ac2142d2e091777df7d68ced25dee3cb791fd180d4dd445b6a5927a00377e84d4e4a433c63407889bbfc85a069dcc87303aef95ee08b37126409f594d8f5e9a8955f4b72b43d4c41428d10e1ccf0b1a95c2b928ef56f86d763be124832a6bf99aa74d4660a148f6f6a88e479b81c837f510c402f97eedf8ef2f642198b1e5042e51510d9c3e025a473f9049b2448dae856bbf85cc9f4145b47099848d4b087fb6f46444d7d2b4b3d2b7d29dddbff06dca96979546f03f83acccd469c051e12e115df8909181565ef0911fb177d57bc88ab7963605febe59ec631d407da3ee0551384e4b0073a5be496750186653aed931adf9c5c326fd57f6d0879ec282ea20ffcefb621cbbdd64f531199fbbe195e36b74e6d1957ef52f9f6a9be286093e23bb264cf44f07fff3caadc345fcf22595041ff0a3725511d6647d3eaa019593ea8bb5dcd2568ed87b9372870b740c04a98bf87819fc4813ec7619ea4accbfe40fad2aecbafa6a54f76fcd584780ced0474650c9ebf487ad267be751ca532f9c32244bfb16e369f6a9f20660b537133bf45f57237f3ce9dfd486f325cce31a0bfc983262f261d544eb2dd3d18430c035efa12d30c27e17ef2b923e0d11535b7caad7263f25489ae179ecd4ff387d08004c80aeeea3c982da9e570e9e61afbc1561c7bf8ea7792120d32a46b499a78163cd90b13efb40ff9ba30ec13c4056556401a329304a4adebf3867500c25eb1d99826783c30e8310e1c71144642273e05143747f7bf99249e9bfc7b3cfdcef74529569d5947bdf9399d948b5e223a4ef88b5ebd3c09c02b880778c290ef2bf0dd4bdaa7f72e249f1cc7841bfb3432136e73e6c9f26a62314bff36adee7bca7bafc9ca0aa43fa07cfaf0a9d0147587fff52a52beb83901ffb1049e6434158671fb7cd6d13e0ea1f96da1ce99160ae4596adc449540f4ec210adf4fd5801419bee34a0bf525b52485943bb260ff854ae9bbad096ef749064c60de5d32185a9921c9372bb9b2839a33592d1a850f597ea630c2e9dd1bb8ae1ccdd22dee75751a53d6b9bcd86445a47ba67d444c4ca42e5af011ac2f4f615cdf5b26d5be05f1a0046c22e973abf763a89626c043cb9cd77cc4cabdf5f14558fda6fd15931f5dcf8efa9dbfa0bb681f851a3d622e4f34d7fde79a4cdb72095ee8551e34099ce487653c9b963e49983c3000f764813c7d174aa2ed38ca5e28e9d2656c1a95a5f6e25b71a52b35371bc2519445e5d06c16ec6e5deb8c3ed9f930107c27ab76047444aa49456c51c8ef5e631d274c624ed43edfb0943824ae63679f7126e8f719dd5bb494038bdc16d0b97d5fd230de8a2cd017ffde1cbac0c55bc9c51b2897e5678237ee2012060da681712ed88cd24ebd9d92f4eb7bdb7b10ba299df84d709062cab25576c86c050f773c0a1641503b33b6bb03904cd3078a52f8ca694a81648fb021a9ea248f3b6742cbd2045"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0xd000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffeac) 21:46:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}]}, 0x2c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000019485d1e8b8a86034386c122a818"], 0x1}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:53 executing program 1: r0 = epoll_create1(0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ppoll(&(0x7f0000000580)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x8]}, 0x45c) 21:46:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x38, 0x64, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x38}}, 0x0) [ 566.006070][ C1] sd 0:0:1:0: [sg0] tag#3294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 566.016795][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB: Test Unit Ready [ 566.023590][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.033418][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.043275][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.053248][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.063077][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.073706][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.083533][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.093364][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:53 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2130451, 0x0) [ 566.103179][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.113002][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.122831][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.132808][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.142616][ C1] sd 0:0:1:0: [sg0] tag#3294 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}]}, 0x2c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000019485d1e8b8a86034386c122a818"], 0x1}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b62", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:46:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0xd000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffeac) [ 566.433997][ C1] sd 0:0:1:0: [sg0] tag#3295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 566.444697][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB: Test Unit Ready [ 566.451489][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.461382][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.471264][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.481148][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.491843][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.501751][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.511629][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.521506][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.531397][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.541296][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.551185][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.561076][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.570984][ C1] sd 0:0:1:0: [sg0] tag#3295 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:54 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:54 executing program 1: r0 = epoll_create1(0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ppoll(&(0x7f0000000580)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x8]}, 0x45c) 21:46:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}]}, 0x2c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000019485d1e8b8a86034386c122a818"], 0x1}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0xd000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffeac) [ 567.046899][ C0] sd 0:0:1:0: [sg0] tag#3296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 567.057564][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB: Test Unit Ready [ 567.064369][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.074287][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.084119][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.094040][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.103958][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.113785][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.123741][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.133590][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.143437][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.153292][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.163150][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.173001][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.182837][ C0] sd 0:0:1:0: [sg0] tag#3296 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:54 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "074dc72464e2ef7303e1ce79318a357db3da2abdb3eed95da4edbf2199a67e8f1441e95ec06e937babc4d77b08583c1da4edeca6103377bbd0e6d1488ba20b06fbde1c34f04eff7c9d8d5eccc7e8cb8b53862e772f358f034f57fcebacd1cdae7c7eccf273b97814f82054e8e50d0cf531c05c2e5b31ab49da98aaeaa2f20b7359b54583c05b7339d99d35c4459a6a609b486c4d150fd981b3b33a2d2f1e509faf9e380aedce80883e0ef04c193c9a38ab6d40033809cc5bd35d01e1a6b2d92028a3386e07b63d998e467c7eee7d10c0288bfc08a86f6eeeb6113995653521e03f8e915fa572b79b33d0af64aa9bcc8c5f2e9281578179ebc9b1edfef5ce11c5f04b4021536978b85a8dac92cfa24784ad483c2dc648cd77c25f331f5992f9c3a406ae51b6299b0c2ad65e3372a15b25775c27f6393cf1f2b770e4d807dd252a3941bc15c14e0a633416e33388a4b97c2d0be1f4b1379393d00f48f13d1b57391924f5af5334489c4b914d3d38a04e3aa77cec3d0d7a80000449709de721496468b8a59160760e61d9a92f37d60e2da8e722374112a2c068691cd8757a549b0e75e93e8586fbd6df5caabdfed6ba684a7575a1dc1fa00a556ba52c1c31ecab69b55a9e0228a7e20c804680b68efd7dcd3279ea5040676ad566d836b869a5cf16066b41d410c02b306ca6a985d2bbcecc716488063f32f7953eafee69c6d4416b3ff6741962a610f7cfd868d34cdca50b7e2ec1bd3e689c08792763d9e52001428a75f2cf3bb51c3bd8f9280e82ba7e2c27883980ecc9a2d44c645f1b50410ec2cd91aca62f5abc381c854c5ec742c6f00cc2bb5053d9e648b16484ce072c81c1c9f43046d7a0ab96749f887a7b73990a1344e2a99d2d91ec8a0bb3e6e4b72f627b90dbadaba0f52cc5dcc478f5233eed51545fb5c4d732de48abf2bbd9e114298704572890111e5df5c8e99f5d45dfee95a4616eba16fe2536599569d0a369e4c84267159698b50275c08e112a3de1dd291189f933d3f0bda42b3123a89970d78378fdaaabb4a044729b9c7c53d4066a5e72b957e3e942dee3a6d4d9a3225a7d6baa6e76d4bfba35a42ffc08a6600cecd880f9ad232f01e354d0b90f8525fcceaeb69cc8747b022a4ef5a65157f6e12acd867d9b3faaa3d34d118e8d44a49bbdbbb8e8def3a464d5a5fcc90ab61cce6df15f130328a94685ea0983412cd907b73c4ce40fbacb9240d55df654714fb02e090622f68ea5176ef6a8bee20d75363d11c29599d2393abcc3e83e26873fdca7bfa38615ea9d92ad9daab4cc561b4e782e0e6a2004cf3a66f52bde7a5f935d423569f9085f23a5ef6c3eba26bbb57ff9138a53b5a203b349b78497ce0a1ede1061b57f74901799ba4ce65d763374a14a95cea3e9704234ca66d4620831d64257fababa0f4c6b1d0a604a1116d0eee27c549df83f52b9c89e89a1a5aa940c6dcff20d868e16de1426dbd04c2df452c9c14777832154063b822ad486470c03f32f479906dd2fdf51680285ae10f7260de7960f5a8d5b6ada1079f796614812710c2143be2710ea39a38493668fdef8870d64667875aa38a0155e52dcd01ed1e486e5fd0a227756d40b683837dc7573913aa3fbd55eababe0ef671eb7419c8ba15ec64a428162740e872023048e679502aa386c4ab66fa6d5ae32e9087c0e1c0b5a3bea5ebefaea17ebca79fae6a6e154273765afd1a80bba198ef5b9369a54c0933df533f1e234f03d546b6a7b853a8159a13d632b1585435e96115f52997162f39ef58468c0a2217c75588f3ce946ffc95c51e24a216bc913d349ea6f5bb0dd7820b60bb35650dffff71f0a754dfef136115a221c26cce18ae66ae2766ad52ff3d3d070b6f545c3e0ad5cf82fe17cda76a74443b192d023c4049e0101e4fd916b594f663e779e49beb74ed13a84a38fdcb68fb992e6cb1fddd3809b0df0ebe4608d5d139ca5ab1cf4e5186262f51a9f923d82c57e9e798023010e8a8ed2569e5fc1209615084e7e2e01f5abfbe537485c16ae293526c749b383ea2dbbab3603f4094b6f725fb52cbfb8b62b355516d447a720f9198a8c2bed49c1ce6c35570f5d2d595b3e76c079b0c24dd7c6abd192d155d28e052b1df0b3269291f2bb62e140fd28524dc8a733e0084addb56ee8ea910109168838fb0816a854d3efcf47883432565a426ec65a35528d70a524dbaaf002736baeb6099a97838fed15942c0f53ec91cfb333bf862d7043e015eb0c1fc5c277bae1f9290f2ab41064290523d4d4306154901dafda830f15b4d2f0c779e609528eb8f8403cd25f5cf86546f17282e93d1dd071faf1fbae1fad8f5fb9ac2bd8117f67a2e02e47c96c606e65e849e72c4360f45defe283a8af1f81b5df3d346e1caef27fe25ff8259757f40e574469a0d4d53a1f5f6bce47e97a0cb33243675a82c119abffca8b1294864907399dba45b143716f5e989326809e43e0c791b35803b707e957b0e0ce798f74514d2f581c9754f07a39a411d62b21f988be0c1aac47dfc2f49e5665ca11c7ecd27942257b60c7107350e7d38fa33a7ad0236ebf99e227034e28e0e82b0bc40af9e56ee7e535654ee2a647ee02ee0a734f1585b0904fbce439771e1c3fd09679864dffbeba46e07b841aa68583434c4d6f04ec312613ab75fbe6c2aeccf9841083ce3f9a9c1405e509d73f34f26ad24663382884dd0c59449c5285d765909618658ead80fc49c874ad65c1dca3c19c41ea405ff12b6ff5f2c581b3e621aab1037f474b9783d55b2590c9a11646f6d2db979e33faf95a67bc053f3d3e4fe3f76af79793d1c56d1e66c5c8f3b0a374f77b64a7ccda3d0a30e1eaf08199a2b00f70997e2653d4ef18c0566885b1d67a7575ab9aaa450745cc7ab8c4ed27fc04e6cc2f8cb216661cba3e77215e0e1bf5471c03a6c1ea457579519d9f3e30955e1070d1df819b18f5209dc3c8d8a23603d16fdb8bb6c3ba743b906bd35a6d8193e1c6d6315582d9e39d848c6c5727671c85046171de01c8d0cf18768d304fd956321c95f7391f878056193c551c143b3c9fa9eb2dbe410d08c2bceea46ec3c4e07f6672728b1415acbf8d042280f61a46a5812585546ff8b62ac19dbc8f75ec07eaa264bf1490527f0013a29f04c2fbd57da2cbf92d54e9128d5365cd9c00733e5c18cd0a211c37172bd8b7f73beb5efd735624a4c36be244d5c047f30fbd1d03e35d64ae8ef81e9dff8ed1cc732948c232c450d7b2956f82e298a2b560ab492e6e83ccf0044b1add7fecda23923411761099fe72f40c982736653d42ac71a3a13e4e56a060069b89e6e9af353264b033a1f0386393da9ed0fd0af474a8a71bc57722bd0be4d25a0f65b5ca0fe43198a28c6a84e34c02cab8a59123e3d221392e08587da49659618fe143695e61c0f314d0033f03b6d201ae83a4421c3e481fff47988e5915a4777356a563359371b1ce53cf7cf8231c63d190f804233fbfc6b1c02ccf25430eb5d832aedb444112b939555aa750f03ba3fdf5fbf9654dd1bc7fe600700a93c969eff7972ba4028e6a4585c050f58ffe29915bc82b3ccea17bf515d8e5d125bfb4aab8822508d0b27eb944ce9dc39fba681490c40f85b394d4fac5b10b9c6e356acaa7736144cca7a21b090621ffeafda58199852b1862e11808e108319244b97ab78dfb2e31f34fe69b1da3f6227a9d11cb6ad1d930ced514c0a43b6e5eb667c9b69053737a257f21903a23bd6850ec18278a1d7ab837e0357f6fbbf636f9b21e84f71db281f2ee17804a0bfe3f8edccfdbe17ee2a78ef61e0385a2e3c09fcfc8224c476c1abe744bf16f2224451cd018b204c278bda3150493942a01d27afdff01561d655c4aa6db4cb5229dad260bde85f1a83c0b941b69ec55eb52e06f77bcfa173151167a890e5b29d22d2f4ca1d12cabe63c9968c66eeaacf732dc09a4aae81f60eaab33e9e721773b5e39401d76df6c563fb57ebcba695ba88db254f13a682733641447ae6a519c91aa39f15847f81e0d41fe443fe6ff34d610431c2215d159507c6703c0df8b5f05acf5fe27fe4f77d5ef3dee1052c9f88251841b983b10593b9e4c5a17974684f51221f425e9ac4f3309d4256fad90140613c1b36ac9971465400ced495745196e2eeb4392d955ea34605ff3969056cfa0ac5f462a66b5c491b3150b3f2ac0f4bd05769b3ea0c52c40bb15c2da3ac2142d2e091777df7d68ced25dee3cb791fd180d4dd445b6a5927a00377e84d4e4a433c63407889bbfc85a069dcc87303aef95ee08b37126409f594d8f5e9a8955f4b72b43d4c41428d10e1ccf0b1a95c2b928ef56f86d763be124832a6bf99aa74d4660a148f6f6a88e479b81c837f510c402f97eedf8ef2f642198b1e5042e51510d9c3e025a473f9049b2448dae856bbf85cc9f4145b47099848d4b087fb6f46444d7d2b4b3d2b7d29dddbff06dca96979546f03f83acccd469c051e12e115df8909181565ef0911fb177d57bc88ab7963605febe59ec631d407da3ee0551384e4b0073a5be496750186653aed931adf9c5c326fd57f6d0879ec282ea20ffcefb621cbbdd64f531199fbbe195e36b74e6d1957ef52f9f6a9be286093e23bb264cf44f07fff3caadc345fcf22595041ff0a3725511d6647d3eaa019593ea8bb5dcd2568ed87b9372870b740c04a98bf87819fc4813ec7619ea4accbfe40fad2aecbafa6a54f76fcd584780ced0474650c9ebf487ad267be751ca532f9c32244bfb16e369f6a9f20660b537133bf45f57237f3ce9dfd486f325cce31a0bfc983262f261d544eb2dd3d18430c035efa12d30c27e17ef2b923e0d11535b7caad7263f25489ae179ecd4ff387d08004c80aeeea3c982da9e570e9e61afbc1561c7bf8ea7792120d32a46b499a78163cd90b13efb40ff9ba30ec13c4056556401a329304a4adebf3867500c25eb1d99826783c30e8310e1c71144642273e05143747f7bf99249e9bfc7b3cfdcef74529569d5947bdf9399d948b5e223a4ef88b5ebd3c09c02b880778c290ef2bf0dd4bdaa7f72e249f1cc7841bfb3432136e73e6c9f26a62314bff36adee7bca7bafc9ca0aa43fa07cfaf0a9d0147587fff52a52beb83901ffb1049e6434158671fb7cd6d13e0ea1f96da1ce99160ae4596adc449540f4ec210adf4fd5801419bee34a0bf525b52485943bb260ff854ae9bbad096ef749064c60de5d32185a9921c9372bb9b2839a33592d1a850f597ea630c2e9dd1bb8ae1ccdd22dee75751a53d6b9bcd86445a47ba67d444c4ca42e5af011ac2f4f615cdf5b26d5be05f1a0046c22e973abf763a89626c043cb9cd77cc4cabdf5f14558fda6fd15931f5dcf8efa9dbfa0bb681f851a3d622e4f34d7fde79a4cdb72095ee8551e34099ce487653c9b963e49983c3000f764813c7d174aa2ed38ca5e28e9d2656c1a95a5f6e25b71a52b35371bc2519445e5d06c16ec6e5deb8c3ed9f930107c27ab76047444aa49456c51c8ef5e631d274c624ed43edfb0943824ae63679f7126e8f719dd5bb494038bdc16d0b97d5fd230de8a2cd017ffde1cbac0c55bc9c51b2897e5678237ee2012060da681712ed88cd24ebd9d92f4eb7bdb7b10ba299df84d709062cab25576c86c050f773c0a1641503b33b6bb03904cd3078a52f8ca694a81648fb021a9ea248f3b6742cbd2045"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}]}, 0x2c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000019485d1e8b8a86034386c122a818"], 0x1}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:54 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) [ 567.549978][ C1] sd 0:0:1:0: [sg0] tag#3297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 567.560970][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB: Test Unit Ready [ 567.567777][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.577957][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.588129][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.598241][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.608262][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.618337][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.628342][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.638386][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.648384][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.659323][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.669317][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.679365][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.689389][ C1] sd 0:0:1:0: [sg0] tag#3297 CDB[c0]: 00 00 00 00 00 00 00 00 [ 567.700901][ C0] sd 0:0:1:0: [sg0] tag#3298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 567.711571][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB: Test Unit Ready [ 567.718197][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.728098][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.738007][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.747931][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.757842][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.767751][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.777673][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.787598][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.797543][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.807483][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.817534][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.827436][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.837338][ C0] sd 0:0:1:0: [sg0] tag#3298 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:55 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:55 executing program 1: r0 = epoll_create1(0x0) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ppoll(&(0x7f0000000580)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x8]}, 0x45c) 21:46:55 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) [ 568.268901][ C0] sd 0:0:1:0: [sg0] tag#3299 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 568.279652][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB: Test Unit Ready [ 568.286737][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.296734][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.306814][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.316839][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.326774][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.336694][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.346584][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.356603][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.366526][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.376434][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.386339][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.396231][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.406128][ C0] sd 0:0:1:0: [sg0] tag#3299 CDB[c0]: 00 00 00 00 00 00 00 00 [ 568.730208][ C1] sd 0:0:1:0: [sg0] tag#3300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 568.740981][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB: Test Unit Ready [ 568.747592][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.757538][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.767393][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.777269][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.787195][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.797053][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.806919][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.816776][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.826690][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.836551][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.846411][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.856301][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.866250][ C1] sd 0:0:1:0: [sg0] tag#3300 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b62", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:46:56 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:56 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:56 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:56 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:56 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) [ 569.658839][ C1] sd 0:0:1:0: [sg0] tag#3301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.669494][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB: Test Unit Ready [ 569.676231][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.686175][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.688868][ C0] sd 0:0:1:0: [sg0] tag#3302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.696092][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.706599][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB: Test Unit Ready [ 569.716260][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.723059][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.732723][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.742393][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.752047][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.761711][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.771382][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.781045][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.790720][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.800382][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.810045][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.819655][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.829332][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.839176][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.848833][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.858509][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.868258][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.877931][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.887605][ C1] sd 0:0:1:0: [sg0] tag#3301 CDB[c0]: 00 00 00 00 00 00 00 00 [ 569.897303][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.914598][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.924449][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.934409][ C0] sd 0:0:1:0: [sg0] tag#3302 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:57 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) [ 571.020851][ C0] sd 0:0:1:0: [sg0] tag#3305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 571.031518][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB: Test Unit Ready [ 571.038127][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.048012][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.057840][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:57 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:57 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:57 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:57 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) [ 571.067668][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.077583][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.087411][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.097625][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.107450][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.109334][ C1] sd 0:0:1:0: [sg0] tag#3303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 571.117351][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.127878][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB: Test Unit Ready [ 571.137588][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.144161][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.153836][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.163510][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.173179][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.182839][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.192492][ C0] sd 0:0:1:0: [sg0] tag#3305 CDB[c0]: 00 00 00 00 00 00 00 00 [ 571.202216][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.209972][ C0] sd 0:0:1:0: [sg0] tag#3306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 571.219414][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.229884][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB: Test Unit Ready [ 571.239488][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.245988][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.255643][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.265313][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.274992][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.285231][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.294899][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.304570][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.314235][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.323901][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.333566][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.343247][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.352911][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.362569][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.372260][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[c0]: 00 00 00 00 00 00 00 00 [ 571.381953][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.389579][ C1] sd 0:0:1:0: [sg0] tag#3304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 571.399141][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.409588][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB: Test Unit Ready [ 571.419261][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.426601][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.437693][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.447428][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.457209][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.466965][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.476666][ C0] sd 0:0:1:0: [sg0] tag#3306 CDB[c0]: 00 00 00 00 00 00 00 00 [ 571.487120][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.494827][ C0] sd 0:0:1:0: [sg0] tag#3310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 571.504370][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.514840][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB: Test Unit Ready [ 571.524516][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.531048][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.540728][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.550394][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.560053][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.569654][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.579427][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.590157][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.599752][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.609512][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.619898][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.629540][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.639160][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.649979][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.659567][ C1] sd 0:0:1:0: [sg0] tag#3304 CDB[c0]: 00 00 00 00 00 00 00 00 [ 571.669263][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.676959][ C1] sd 0:0:1:0: [sg0] tag#3307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 571.686525][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.697085][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB: Test Unit Ready [ 571.706764][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.713312][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.722979][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.732621][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.742294][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.751956][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.761611][ C0] sd 0:0:1:0: [sg0] tag#3310 CDB[c0]: 00 00 00 00 00 00 00 00 [ 571.771275][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.788460][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.798286][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.808151][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.818004][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.827851][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.837708][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.847567][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.857407][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.867250][ C1] sd 0:0:1:0: [sg0] tag#3307 CDB[c0]: 00 00 00 00 00 00 00 00 [ 571.875167][ C1] sd 0:0:1:0: [sg0] tag#3308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 571.885873][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB: Test Unit Ready [ 571.892650][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.902551][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.912421][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.922320][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.932372][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.942280][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.952157][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.962054][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.972074][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.981951][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.991845][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.001806][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.011691][ C1] sd 0:0:1:0: [sg0] tag#3308 CDB[c0]: 00 00 00 00 00 00 00 00 [ 572.019522][ C1] sd 0:0:1:0: [sg0] tag#3309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 572.030172][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB: Test Unit Ready [ 572.036792][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.046670][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.056552][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.066418][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.076416][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.086314][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.096202][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.106120][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.116002][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:46:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a027fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) [ 572.125865][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.135753][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.145628][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.155522][ C1] sd 0:0:1:0: [sg0] tag#3309 CDB[c0]: 00 00 00 00 00 00 00 00 21:46:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b62", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:46:59 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:59 executing program 3: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102392}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) socket$kcm(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 21:46:59 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:59 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000180)=0x8001) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99814810279f41c83d4ebc76360b14a8b9cf10c2aac6b927631409633158e5627f560c2a2a6009be3cbf6f9cc971a3ddf0bd568a55de3d6dd26d60ebe1e5c18f16a6be18f520f679d395781d76fe68220c8a965a6c00ee79847e95be0611671810284facc8125c0bc55d02dcfd6aaabe2e14976a59e9ecf6296f54ac1ac0df63a094aff00f87a8b35f5bd106597cc65859fa0d87ab87bbca737c67133eae"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfd5, 0x9, 0x1f, "3be9cae1897a933e18973d4d306eebd3", "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"}, 0xfd5, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2000000000000021, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000000007ff, 0x0) linkat(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'sit0\x00', 0xaec}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r3, 0x0) dup2(r7, r6) 21:46:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a027fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) 21:47:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a027fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) 21:47:00 executing program 3: epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) 21:47:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a027fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) [ 573.781055][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 573.793478][ C0] clocksource: 'acpi_pm' wd_now: 9f30a3 wd_last: bac9b mask: ffffff [ 573.803643][ C0] clocksource: 'tsc' cs_now: 138b6d36a5f cs_last: 137449b67aa mask: ffffffffffffffff [ 573.815260][ C0] tsc: Marking TSC unstable due to clocksource watchdog [ 573.827479][ C0] sd 0:0:1:0: [sg0] tag#3311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 573.838134][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB: Test Unit Ready [ 573.844850][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.854677][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.864503][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.874335][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.884160][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.894089][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.903941][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.913786][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.923619][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.933467][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.943297][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.953127][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.962957][ C0] sd 0:0:1:0: [sg0] tag#3311 CDB[c0]: 00 00 00 00 00 00 00 00 [ 573.970843][ C0] sd 0:0:1:0: [sg0] tag#3312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 573.981456][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB: Test Unit Ready [ 573.988057][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.997895][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.007745][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.017574][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.027416][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.037228][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.048025][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.057860][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.067716][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.078036][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.087905][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.097772][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.107643][ C0] sd 0:0:1:0: [sg0] tag#3312 CDB[c0]: 00 00 00 00 00 00 00 00 [ 574.118827][T15113] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 574.128581][T15113] sched_clock: Marking unstable (574319062629, -200220251)<-(574118403457, 400477) [ 574.340735][T16290] clocksource: Switched to clocksource acpi_pm 21:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x80000002) 21:47:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 21:47:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xffffff0f}, {&(0x7f00000003c0)=""/102385, 0xfffffffffffffc25}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15c, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 21:47:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b62", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x80000002) 21:47:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x0, 0x0, r9}}, 0x20}, 0x1, 0x40000}, 0x0) 21:47:03 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xe07000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xe07000, 0x1, 0x11, r1, 0x0) [ 576.194506][T16311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 576.258853][T16318] team0: Port device veth7 added [ 576.617885][T16311] team0: Port device veth7 removed 21:47:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0x4147, 0x0) 21:47:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x2, 0x1d0, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/464]}, 0x248) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) 21:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x80000002) 21:47:04 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) 21:47:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x698b4796e327f9ef) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') sendfile(r3, r4, 0x0, 0x6052b11e) 21:47:04 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='\b') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x71, &(0x7f0000000100), &(0x7f0000000180)=0xc) 21:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x80000002) 21:47:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @empty}, {0x20000010304, @link_local}, 0x0, {0x2, 0x0, @remote}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @broadcast}, 0x2}) 21:47:06 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$pokeuser(0x6, r4, 0x1, 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x3, &(0x7f00000002c0)=""/131) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x80001, 0x84) 21:47:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getdents(r1, 0x0, 0x0) 21:47:06 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x60000001}) 21:47:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000000)={0x0, 0x1, [{}]}) 21:47:08 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0x1, 0x3, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3c36bb8bbbc494b461e9f72a085708970137e43914c89958b22bee8d475", &(0x7f00000000c0), 0x3, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/155, &(0x7f0000000380), &(0x7f00000006c0), 0x2, r0}, 0x38) 21:47:08 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000140)={0x5}) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x86) 21:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @local}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_val={0x10}]}, 0x148}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:47:08 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) 21:47:08 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$pokeuser(0x6, r4, 0x1, 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x3, &(0x7f00000002c0)=""/131) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x80001, 0x84) [ 581.109386][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:47:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247008, 0x0) 21:47:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0x1, 0x3, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3c36bb8bbbc494b461e9f72a085708970137e43914c89958b22bee8d475", &(0x7f00000000c0), 0x3, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/155, &(0x7f0000000380), &(0x7f00000006c0), 0x2, r0}, 0x38) 21:47:08 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 21:47:08 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247008, 0x0) 21:47:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0x1, 0x3, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3c36bb8bbbc494b461e9f72a085708970137e43914c89958b22bee8d475", &(0x7f00000000c0), 0x3, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/155, &(0x7f0000000380), &(0x7f00000006c0), 0x2, r0}, 0x38) 21:47:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:47:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, 0x0, 0xfce) 21:47:09 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x19, &(0x7f0000000080), 0x8) r3 = dup2(r2, r2) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 21:47:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247008, 0x0) 21:47:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0x1, 0x3, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3c36bb8bbbc494b461e9f72a085708970137e43914c89958b22bee8d475", &(0x7f00000000c0), 0x3, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/155, &(0x7f0000000380), &(0x7f00000006c0), 0x2, r0}, 0x38) 21:47:09 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) sendmmsg(r0, &(0x7f0000004b00), 0x1, 0x0) 21:47:10 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$pokeuser(0x6, r4, 0x1, 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x3, &(0x7f00000002c0)=""/131) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x80001, 0x84) 21:47:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247008, 0x0) 21:47:10 executing program 2: madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0xb) 21:47:10 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="4d0003"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{0x48}]}, 0x10) 21:47:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0xd, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) 21:47:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x402, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:47:11 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="1c1f86bc33915e6a7e0a3ba600dbc292b1ecafd03b42bcfc376ea83625ab76a5c91428b5b30ccb950d5a9c4bda54e0732b3ee004f6d5b4d97e8611651535ca7a8becf008bd2d9fb08262ba59f67f73bf471fe190e7cf43a3059ffdd9a990376604633b94c332377021e65d6a30", 0x6d, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="1ba000001b001d0d89fdc5cbdd045798707bed4dca14a7960f0f8ec8da78031c7660b08f515e", 0xff3b, 0x0, 0x0, 0x147) [ 584.212678][T16454] netlink: 40795 bytes leftover after parsing attributes in process `syz-executor.0'. [ 584.238620][T16456] netlink: 40795 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:11 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@ipv4={[], [], @private}, 0x78, r2}) 21:47:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x96) 21:47:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@dev, @dev}, 0x8) 21:47:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCSETSW(r0, 0x40085500, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a4375ed6d8b5ddc24eedc2e18189e05808d23e"}) 21:47:14 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$pokeuser(0x6, r4, 0x1, 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x3, &(0x7f00000002c0)=""/131) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x80001, 0x84) 21:47:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000800)={'ip6tnl0\x00', @ifru_data=&(0x7f00000004c0)="85828efe55ebed48d53e39fc0eae88d3ec3ae5ee04b7b769e056b120956a21f3"}) 21:47:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 21:47:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCSETSW(r0, 0x40085500, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a4375ed6d8b5ddc24eedc2e18189e05808d23e"}) 21:47:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0x1}], 0x1, 0x0) 21:47:14 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40000041}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) dup2(r1, r0) 21:47:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCSETSW(r0, 0x40085500, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a4375ed6d8b5ddc24eedc2e18189e05808d23e"}) 21:47:14 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x800000000009031, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000565000/0x3000)=nil, 0x3000, 0x8, 0x8010, r1, 0xe0d96000) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) munmap(&(0x7f00005ad000/0x3000)=nil, 0x3000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x6b2040, 0x0) 21:47:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 21:47:15 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40000041}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) dup2(r1, r0) 21:47:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCSETSW(r0, 0x40085500, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a4375ed6d8b5ddc24eedc2e18189e05808d23e"}) 21:47:15 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00374403018c050000000002f0140808001d47511b020008001d0010000000ad29bcaeb914e3a43885dd6ea2f92e143942b64fe243054ef14a4d45c8540fd751d52c27cab48387135e0b08f6b1e160311f1d80d70b42c17b39c1d12b223fb5eae5ab58959fa2b62211559bb20006ca3600a00e1c796910"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 588.222658][T16522] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 588.253826][T16523] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 21:47:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) 21:47:16 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40000041}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) dup2(r1, r0) 21:47:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0x1}], 0x1, 0x0) 21:47:16 executing program 2: r0 = getpgrp(0x0) getpriority(0x2, r0) 21:47:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) [ 589.140122][T16538] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) 21:47:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) 21:47:16 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40000041}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) dup2(r1, r0) 21:47:18 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x8000002}}, 0x10) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r0, 0x0, 0x0) 21:47:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) 21:47:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @raw_data="2f98d9ef36ed7a29585955567f28fc241fe51b93f9dc1fdc8d3e220692138df12f8de2c2b03afa1461aba4cb2a3e35158c0b7d787da2a48c3552a0305e957f94c7133ed76908617bda6ea891d8b69c1447bfb2dc551fca79f03b72ab29e9c407c1ba492ea38f063b745acc0d4dda1f1125363f6b8c66d8c907d0fc866e649982945e8dc223220ff69b314e9665dab8202d52f39726d189f56616f435e7f113ecf92604141d49657963cafba8bf9b84d92a297a271d506fa2b5992866c3892e38f878383396abca4d"}) 21:47:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) 21:47:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="fdffffffffffffff28001200190001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00001000000000000e110000070001006677020000000200c43e7f40e8ad9011842f4c88ecf40d5ccb91b81d915ded36bf1c5a9e26cdbbc4044347398d7c960279c15fdfaf035094fab0afe09f56ab3441a9ae642375d9babdb5e4c6209c3e94a1daf98fc15e1b0e1c4bf00eb641565185d50dc2f5c26c6d3f12a14b5b8c763007746700f759934b0308b9c85fe5faabfcd74ccd825643fef142019e3ac37bb1f36ef48b9ee7560687b7fc49b0034f0475d7d1743a1f39282a3e6a7238b613163f6f921ee2ad11a087ace4114372a2533b936fb3404226"], 0x30}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:47:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0x1}], 0x1, 0x0) [ 590.927242][T16562] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 591.034728][T16570] tipc: Failed to remove local publication {0,0,0}/2609768919 [ 591.043503][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 591.066276][T16569] tipc: Failed to remove local publication {0,0,0}/2609768919 [ 591.067295][T16565] device veth21 entered promiscuous mode 21:47:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigpending(&(0x7f0000000040), 0x62be870eb0a75df5) [ 591.104685][T16569] tipc: Failed to remove local publication {0,0,0}/1704416961 [ 591.126390][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) 21:47:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) [ 591.209170][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 591.268502][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 591.296346][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 591.339314][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:18 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x41b) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xa6b, &(0x7f0000000400)="fa13031b36b06be279451425c8d5ea6b4946a73613bddaf45e4c530717f0bfe064e06f62017f4d592066ecf61ff460cda032b5ae2283c2b79c33c77ecd3dd4780412bf31c49bf647123a7f5dfe2a6e17d91e2ea44a2257f407b57d06c89ddd9e649cfa3c3929bd59dbb7c723a5889bdac4efbc0de090345c213eea8c7b23b8df7223b237c319c2444810c2be03e64d58d909223e674dd7856ba0642775eaf0d2df91a09b9abc98deaeb5c33c3fddda13c44c67cc70f356538103ccaccc06f36a25b7a08c150e8036a0353ba69437a9e609ef3128262fef7a6121ce3a09e9403d7bda3651019fab24646cd69ac1a47783d8b95db03fd5a4e3c3afff2c54f19296a84d1c377b4f9d2044b3f63fb902d7fb1c7f24003b3371950d7f5732017cef2faa6066bd891b77aa6f15e06618ebfe628092192927b5fa7c2b5c7df7d2983ea25b008781f1a64fad3285b803bc9c71ffed139a1bb72807152c8352f57a091fdb0da92c2be69fd4ab7ceae024539acdf07a4769e32e9fcce4d5d4f854cc50447f72e3a17453e0d419c5060705a8cbdd2999eed94d92afaa2b504198b2100ec7536e6c8cb9697a114ffa75fb444f53ceaf5d9dff34da14655fb681d006f2b1838c4fce61cf93650f2ebf674d6cf9ad6e26ae6bd1135b21b7c74f6be9be3420c087705bc9df04401c8ed7f4e457a64df442b9810c85aa52877b010051b67def9930c426fc575128976d30b519f3b8fec1990fb4eb29d7ddd688c2e67740f9796736137ce173efa1ed7cc13b92f1ebd7241f1821266cadc585af55b07e9edfa694552ff8c4d9063a995fff0d828b5ff1a8e787d4a68e519a13b6d809cc6a588a8f6b12f12fd1cc230b815b40a81aca65756821b5df40e8c09432f7cff2f815137b32d1e9a96b637bf8ec4ac2ca18482c1de4b22791c3f81597714c8d85d4437c43e13c581f9de889f6bd66d09e97dd7f26a0729c11d6dbc16e1905787cc3e22df1324c57da395e986d40167ea5758f8d8b487b0bdc4260c8c1316da9f4c990b18ce14961a2942d1d6600d81129eda581799a91929a312ddbc6872f3b1b5941961fd4d4591ca64242303531c53c909358035e7d2bf36d4ba87c1871fc62e5f9ac68e751b0410137581477bdfe8c0b78a25f712544a408a2df1c4f9d8f769bda2b15a0fa4e73270c58eaea1c2c4b4042562a6d0f8ca904aeaa1e5d0fff3ad67df1885135a30b22ddeeba586acf48856d3085aceb37f16b053db81801b273aa97ba9520c88872695b606b0348d8360be31375fbc4eb13d1205df82448c7b99db086cf79e539a9836a47c3c9f605904170b47c31f5d773d7c5f09f2341b8c519a1fc5b344a9ec7f776af6ceb04e69ccf5eaf1d6c7ab63b08d82a7c43140fd271c5d30dfd2b1d802f2235e1873774af9c946ddb26d022ae3444d749b64171c43afc6cd5e7061d4b03ab3f2bc0fd2a7f6bad0f467d71d48df7baa7a1e7b701cb2f4216e5532cdffb87d25ad73b80bf695b9368d2175223c49d23ef2064e2a7bdc02c382ad0ccef24a948bf6ef34381e61de9cf6ece2106d41d7a93d4ebea6de2c930dc87ee940be4fa2c45184e1328f2f2d43f8b980621cce3ffb4777d3ee10f41fed4679929ccabe10cf2b9795393a35f82bcd9ad42eef5202fe110c1b4c67615b17869a5f489c4190bb9bdf832ca53188f596e564d8bc8fb1e7efe9cd2c36fe9cb00208f2225a840fad171fa63ead3907e17647cea2adeb0b80ae264baf6deb1e2d9e2ef5524219e84d116c605df271b9de2b8bf25bce17845b9a62e14bc49f219d84f187ef0c096bd3a94af86e009a1b9230c478318f427c51a59313979ee61989f4293d54c0dec8f28e8b8665d765abccd5e615f08215b4f948b44e47488f90d20491b78f4b8f1ba8af0f8760b956242a5d2bb62672052840e479d2f5fdb28b409a442273dad165fabc905b127fe7521333a041987792fa2a85e894a750eeb9f3d26dd484823043b142b357ccaed87e35e458ddecdd44ec129415609ca2e7e8b975cd4fcb515017819cb2ced0007b86cdbe578319d8d73c42a17ccf76ca0d10a18aba4fa59ada6ead9d6686b1a48dc1951ad0bc61490ad7db3e973acd7946b4a14372c055c933a11240e2a3cf102c2c558d5a6da69f542fc7df55f8ebf7dd7a26d5c9df9cf404bc009839d33a4febaa7950944eff2c786865c5ed5674cf9aa9d145756e64b0f6ad731055d17d6494c11b60bbc491154e5160b6bfcc739ce3c2dc9cb897edf384391311bc3b994111d67e946193e2729fcc90340326a3b4691cf178cd9d9ae6bcc91afcf44c8aeca8837fa861517b53468bd019381077c56408c078666e3150f4b8979e3de49b3d1a154715478000ce547f45b780edd3a8b19c00e2e127c02771d0d2f1c84d8f0e7174df9667ddad0d290954d05b699d0c93794f4ca79841597b9b8dc782af5e95f751095b0b2c5c73cad5b615715497b5b47b181ead6d872f59da0372d3d065036162724c1791bfa7dc21c21e5c3f1b306b33a2efdc9309f8301fbba75272ae2d80d3111c4a928c2cb5ec9bea65561a38ecabac7242b6a9732c257f857c1bf3add78c202914280c5fcc875b996c054f6882c26f3a561e06aafd9b72dd271dcee546c1fe689f14660587efc385f2f8002862af5b601c509febde6375eb3c71273dcffb4db5f10f1cdd530e7eae009beb61063277a8d5c6124a1c390a5b9f9de7ed7130eea68e56f04715ee015bec853d2addfc29d8dcd6db8fe9fd1e454ee1a729dcdbf92c990799d55fb2c55cc4be3b3189b20f23c8ebb87e6313b5f53b6de9846eb6acff9e301fd443a621666c39f03d5feb23772f8fae8cb77c18697d3e036023fa5f60ec8a4adc0b6c6e18e370734cec1ae84f8be2e31fcf5dce74dd3c3f96b738f1fa72f66bd12472b13876c94cbb4e225dcb5be02d668b537a0271170a980a81b68d3eb3ffa45b076406b039854a6278cf92f969f14ff0dec83e4d3b156b84d85fb9a80cad6acac56ac8c61305ac6f7d97b8383c187ab19877fd593d47ebd2dbffffbf0b8d185444395341a130b1e7a140c32455c0137ac62ec48f8df0803221a3336d76db609b8cffba28032acba05ddda74e7c5a748028ffbd9785c64ef14c809b6cbf496b4c7a31116be2960036ce54c6ba23fe56ae6abfc9a95faae3c5095a7085344eff0a332cee15a3335d9d2f2f135dcf91049ceb446f5b07771a5296f07b07305df2fc0d33a95740d6c50c24dd3088acb1bcbcee6e3666727ee4c1cbb1401d38e00c19143e29ee7a38c30006759992b44fe77ca24a43d7c56f341c478d58e7b853e84c3168eb6708cccf13129063fab5d3598e5e8a47e7254cf6bcd4c4e734a911cd61b2ed146d686b80af27c83c5ca1f4dd7a866ccd4b7440867f7089d24ac458ce575d72dd53736634977f5e42a6588ea93dc3d9a57f455f183e07da64eb20a59c9ad66f9ad9cee67352916c09417411d90c1e5a26c7f6f8719d9eb66cbbb471d25443aef2b597ae38fe5cac9cec0cab27ceb2557d928320660b847445d5d70141551d18c05584b0b1263ca23046978e5b38049ebc7c0d90a48e7bd5ad6a5e16a6f29e4720f4982245067c7fdd41d2b037f01a42829afe6ab3a0f55176481282017f723b22f4a1a3f896d0ef8a2bc5b7532fcf196997c80e9779acf603d9a288938dae18b67dc7f2cf2f3fcebce886451b6464aae6296a78f0c962738cfe3591dec5fc776db85a722901952440ca17b8d12b3037ca40acff22c"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 21:47:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigpending(&(0x7f0000000040), 0x62be870eb0a75df5) 21:47:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) close(r1) 21:47:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1c1042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) 21:47:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0x1}], 0x1, 0x0) 21:47:19 executing program 0: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0xfffffffffffffffe, 0x0) 21:47:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r1}, 0x10) r3 = dup(r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x200041c1) 21:47:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigpending(&(0x7f0000000040), 0x62be870eb0a75df5) 21:47:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d0703000000000000004713b2", @ANYRES32=r3, @ANYBLOB="00000000ffffffff100000000800010068686600050005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 21:47:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigpending(&(0x7f0000000040), 0x62be870eb0a75df5) 21:47:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200000900000062f2fed121571898aac117d4e76f502e922308029195b3436abe00cb43a9d44b36bcdf2f33ca946de49c27a13e0dbfe6e709e85fe4780e9a5209f0c2b3e7460ff2a5078abc6b377844ef69f40f791837acfbadc36475a25f37ea51d6a833ba81ac01e098c86c8ef64bb8ac87325c48865f6002122c374b809269cbc88a7a502aa029f0995d584fdfa71ab3a7f0b5022404ec07ce8824404f4d38d8f3f721fbbfe81d26c136f66a88d7a3b6407e593a86f0a9dde839292400a22d2e3d79050456defd191682930c1707"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 591.782145][T16595] ptrace attach of "/root/syz-executor.3"[9907] was attempted by "   k\x0a  °ÿ àÿ 0 p Ðÿ  ÿ  ÿ ðÿ ÿÿÿÿ @ = [ 592.237855][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:47:19 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) read(r0, &(0x7f0000000340)=""/197, 0xc5) [ 592.487633][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) close(r1) 21:47:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 21:47:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041}) mmap(&(0x7f0000114000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 592.885838][T16652] vivid-000: disconnect [ 592.899220][T16650] vivid-000: reconnect [ 592.915118][T16652] vivid-000: disconnect [ 592.954249][T16650] vivid-000: reconnect 21:47:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000380)=""/230) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x5c5064) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="00214900000000000000000601000000000000000100", 0xad}], 0x1, 0x0) 21:47:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0xffff, 0x4) sendmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="ae6056b3b0002ec93b60059e06755476cb57c8e19ebf7e5eff0f03314330e27c0f5fb9bc407a9175", 0x28}], 0x1}}], 0x3ffffffffffff30, 0x0) 21:47:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b85f6200000f23c00f21f835010000000f23f867f4c4c1b573d3070f015b00f30f09670f21eff30fc7ffc4e37d44928ed5723400360f01c53ed8eb", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf37]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000024d564b0800000003"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:20 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 21:47:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) close(r1) 21:47:20 executing program 3: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 593.295508][T16671] input: syz0 as /devices/virtual/input/input16 21:47:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x22, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) [ 593.448323][T16671] input: syz0 as /devices/virtual/input/input17 21:47:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x90) [ 593.631106][T16696] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:47:20 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x98, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0xf02f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x73b000, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x218, 0x0) 21:47:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) close(r1) 21:47:20 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0xfffffffffffffffd) 21:47:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffeb7, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800050000000000419c726960266dc9bb0d0d448bee6161e7369d94ef57b4d19be18516558d83c870543d671cef03f1b4e2e95f8b7a4f5ba6493deda5d3aa33e13ee855d4aefe859b6700fc0ceb9d2d6c2e106631ea26a66773722b3f"], 0x3c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 593.805919][T16705] binder: 16703:16705 unknown command 0 [ 593.811850][T16705] binder: 16703:16705 ioctl c0306201 20000280 returned -22 21:47:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = gettid() tkill(r3, 0x1004000000016) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f0000001300)=""/4096, 0x1000}) 21:47:21 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 21:47:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @loopback}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r2 = dup2(r0, r0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 21:47:21 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 21:47:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000b2e8049e8086950e0000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}}, 0x0) 21:47:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) [ 594.405310][T16734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 594.441532][T16734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:47:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 21:47:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000b2e8049e8086950e0000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}}, 0x0) 21:47:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) getsockopt$packet_buf(r3, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f0000000100)=0x483) 21:47:22 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x40046104, &(0x7f0000000040)) 21:47:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b203000000004f707f6debceabb54c744f336b43134d76ad2b49faf4a01853b2632c6f20008d32282d0f56d4d3e960a24bdafa91d17f6fd686d4cccaca"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363001000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 21:47:22 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) listen(r0, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) listen(r2, 0x3) 21:47:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000b2e8049e8086950e0000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}}, 0x0) [ 594.964857][T16764] ptrace attach of "/root/syz-executor.3"[16715] was attempted by "/root/syz-executor.3"[16764] 21:47:22 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000041c0)=[{&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r0, r0]}}], 0x20}], 0x1, 0x0) recvmsg(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x0) 21:47:23 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r2 = dup2(r0, r0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 21:47:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xef}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x40) 21:47:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000b2e8049e8086950e0000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}}, 0x0) 21:47:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x6000) 21:47:23 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) listen(r0, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) listen(r2, 0x3) 21:47:23 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 'client0\x00', 0x0, "9695e8d97ddb7d48", "44f8e0f9af594fd5f13341ada987f0017fd18f55f60239e82654073da87d89c6"}) 21:47:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000002000070853a539f01f658f622148de773684c1d790cbf"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 21:47:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xf0, 0xf0, 0xf0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x33}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[], 0x2}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 21:47:23 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) listen(r0, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) listen(r2, 0x3) 21:47:23 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="9cabbf0400080000009b800086dd", 0xe}], 0x1}, 0x0) 21:47:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009504000001000000e5"]) 21:47:23 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) listen(r0, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) listen(r2, 0x3) 21:47:24 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r2 = dup2(r0, r0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 21:47:24 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x60, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}]}]}, 0x60}}, 0x0) 21:47:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000002000070853a539f01f658f622148de773684c1d790cbf"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 21:47:24 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="9cabbf0400080000009b800086dd", 0xe}], 0x1}, 0x0) 21:47:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 21:47:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000180000e1"]) [ 596.932922][T16899] tipc: Enabling of bearer rejected, failed to enable media 21:47:24 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="9cabbf0400080000009b800086dd", 0xe}], 0x1}, 0x0) [ 597.002773][T16907] tipc: Enabling of bearer rejected, failed to enable media 21:47:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0xfffffff8}, {0xa, 0x4e21, 0x4, @remote, 0xfff}, 0x5, [0x9, 0x1ff, 0x200, 0x2, 0xce, 0x1c73, 0xfffffffc, 0xe32]}, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback}, 0x20) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) 21:47:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000002000070853a539f01f658f622148de773684c1d790cbf"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 21:47:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000280)=@mpls_newroute={0x30, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "30bbe24b1bec54bbf185f3aa02b6"}}]}, 0x30}}, 0x0) 21:47:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"}) 21:47:24 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="9cabbf0400080000009b800086dd", 0xe}], 0x1}, 0x0) [ 597.329272][T16924] kvm [16918]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xa25c3c0000000000 21:47:25 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r2 = dup2(r0, r0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 21:47:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000280)=@mpls_newroute={0x30, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "30bbe24b1bec54bbf185f3aa02b6"}}]}, 0x30}}, 0x0) 21:47:25 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000002000070853a539f01f658f622148de773684c1d790cbf"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 21:47:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0xe) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x1000, 0x32fe3cf0}, 0x14) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0xedc3) 21:47:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40084503, &(0x7f00000011c0)=""/4096) 21:47:25 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003f00)=@newqdisc={0x15c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x130, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, @TCA_RED_MAX_P={0x8}, @TCA_RED_FLAGS={0xc}]}}]}, 0x15c}}, 0x0) 21:47:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000280)=@mpls_newroute={0x30, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "30bbe24b1bec54bbf185f3aa02b6"}}]}, 0x30}}, 0x0) 21:47:25 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000a061f001cfffd946fa2830020200a000900010006", 0x19}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x5, '\x00', 0x20000000001}, 0x9) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 21:47:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x32, 0xffffffcc}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 21:47:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000002c0)={0x0, 0x1}) 21:47:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000280)=@mpls_newroute={0x30, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "30bbe24b1bec54bbf185f3aa02b6"}}]}, 0x30}}, 0x0) 21:47:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0xe) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x1000, 0x32fe3cf0}, 0x14) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0xedc3) 21:47:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) dup3(r0, r1, 0x0) 21:47:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14b4801c", @ANYRES16=r0], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0) 21:47:26 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000340)={0x0, 0x7fffffff, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9d0904, 0x1, [], @value64}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x800, 0x0, 0x0, 0x9, 0x0, 0x8, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) r1 = socket(0x2, 0x3, 0x2) r2 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000480)='2', 0x1, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r3) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='macsec0\x00', 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x4002, 0x0) dup2(0xffffffffffffffff, r5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={r6, 0x2}, 0x8) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 21:47:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0xe) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x1000, 0x32fe3cf0}, 0x14) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0xedc3) 21:47:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) [ 599.054187][T16984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready 21:47:26 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6fff) 21:47:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0xe) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x1000, 0x32fe3cf0}, 0x14) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0xedc3) [ 599.435358][T16992] IPVS: ftp: loaded support on port[0] = 21 [ 599.442175][T17012] __nla_validate_parse: 3 callbacks suppressed [ 599.442206][T17012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 599.538997][T17012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14b4801c", @ANYRES16=r0], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0) [ 599.855532][T17028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready 21:47:27 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="a0d30400", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, "00006371ae9b1c01"}}}}}, 0x0) 21:47:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000002400070700eebfde00000001000b0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d0000000334"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 21:47:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) 21:47:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14b4801c", @ANYRES16=r0], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0) [ 600.375472][T17043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 600.695363][T17049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:28 executing program 1: socket$inet6(0xa, 0x3, 0x100) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x38d, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000000010000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 21:47:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8) 21:47:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14b4801c", @ANYRES16=r0], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0) 21:47:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) 21:47:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 601.833346][T17064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 601.907351][T17073] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:47:29 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x3, 0xfffffffffffffffe, 0x0) 21:47:29 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f00000002c0)="14", 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r1, 0x6, 0x1d, 0x0, &(0x7f0000000000)) 21:47:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x69, 0x11, 0xaa}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:47:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 21:47:29 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2, 0x0) writev(r0, &(0x7f0000001280)=[{&(0x7f00000001c0)="e1", 0x1}], 0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0x5000, 0x0) [ 602.519717][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe07000000e3d5dbaa913f01000000450001070000001419001a000400030007000a00550e69330f4de5020080080000", 0x39}], 0x1) 21:47:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@random="b7e095637cba", @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "eaa85c", 0xc, 0x2f, 0x0, @local, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) 21:47:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 21:47:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x64, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_mpls={0x2c, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4}, {0x15, 0x6, "51802af90fe8e869355e7fc5f2e68c6394"}}}]}]}}]}, 0x64}}, 0x0) 21:47:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4e96e1", 0x48, 0x2b, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[@srh={0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@mcast2]}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '/\x00', 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) [ 603.116638][T17110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 603.233458][T17112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:47:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 21:47:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000f0c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000077c0)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 21:47:30 executing program 2: process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x9f84}) 21:47:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb9cca7480e0a02000000e3bd6efb250009000e000a0014000000000000001201", 0x2e}], 0x1}, 0x0) 21:47:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) 21:47:30 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, 0x0}, 0xf8) [ 603.509000][T17123] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 21:47:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 21:47:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x101}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:47:30 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000540)={0xa}) 21:47:30 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f00000025c0)='attr/prev\x00') 21:47:30 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, 0x0}, 0xf8) 21:47:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)) r2 = epoll_create(0x4) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) 21:47:31 executing program 0: r0 = socket(0x22, 0x80002, 0xffffffff00000026) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x1) [ 604.166683][T17148] delete_channel: no stack [ 604.172781][T17148] delete_channel: no stack [ 604.232843][T17152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:31 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, 0x0}, 0xf8) 21:47:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 21:47:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5413, &(0x7f0000000040)) 21:47:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 21:47:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x8) 21:47:31 executing program 5: r0 = inotify_init() r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80287010, &(0x7f00000048c0)) [ 604.524006][T17167] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (4) 21:47:31 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, 0x0}, 0xf8) 21:47:31 executing program 0: futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) 21:47:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0xc, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x2}}, 0x68}}, 0x0) 21:47:31 executing program 2: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x34}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x73) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="df", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) close(r0) 21:47:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000180)=@random={'security.', 'wlan1mime_type\x00'}, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000100)=@random={'security.', 'wlan1mime\x00type\x00^\f\x95YzP\x0e\xa9~\xc2\x1e;3\n\xe8\xd8\xfc^\x9f\xdde\xe6\xdc\x1c'}, 0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='security.w'], 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000180)=@random={'security.', 'wlan1mime_type\x00'}, 0x0, 0x0, 0x0) 21:47:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x1, 0x47, 0x2}], 0x18) write$evdev(r0, &(0x7f0000000040), 0x373) 21:47:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqsrc(r0, 0x0, 0x14, 0xffffffffffffffff, 0x34) 21:47:32 executing program 2: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x34}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x73) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="df", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) close(r0) 21:47:32 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)={0x80000000}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) 21:47:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000004c0)={0x3, 0x0, 0x220, 0xfdfdffff}) 21:47:32 executing program 2: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x34}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x73) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="df", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) close(r0) 21:47:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x300}]}]}]}}]}, 0x44}}, 0x0) 21:47:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4002000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r2, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ad0000/0x1000)=nil, 0x3) 21:47:32 executing program 0: keyctl$join(0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000200)=""/86}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) 21:47:32 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000240)=""/129, 0x81}], 0x1) 21:47:32 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x36) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 21:47:32 executing program 2: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x34}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x73) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="df", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) close(r0) 21:47:32 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x1}}) 21:47:33 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3b290a2, 0x0) 21:47:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @remote}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x6, &(0x7f0000000100)={@empty=0x10, @private}, 0xc) [ 605.930439][T17220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:33 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x3f4) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000004e4, 0x2, &(0x7f00000001c0)={0x77359400}) 21:47:33 executing program 1: io_setup(0x1, &(0x7f0000e4b000)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x78}}, 0x0) io_submit(r0, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) 21:47:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x0, 0x0, 0x3f}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="bebc37573417944e7c2e03cd77c119789d8a3bd37ed060d2a27a9d8658601124aef9306601e9d9e910d8702b49885eeae2e2c79adbe7b9c69d191179dc90710a5b961ab56918e740d6484bcc8e02dfd85165c2055ee6ca47380c123f6afa4b64b1be4e4530cbcdd80b7a3b36edea7dee952aad83d71412f2ce0562d75ce8e78e07b7919375b738dad3cdadfa4453796749d043dc488dcd8b990b0a2e25d5cccfea2a80991321a4c85faa66693bd9e4532012ce66cd46f6dd811dda1e3bc40b8cfebc9012ad3324ac9a6e40c874e166536b0d9789053ef029fe5312a3fd1d05478810b025a1828aa8f97e8a05cde70c0b0b6d29fafdc0906e311584acb30f7f148809fd56e0455fb63c99715ea6b5bb10df741e63e6be60dd7bfd7a2d423f1761a84d33af84ec9f51f9414dd14f7a7825222faaf0741d4726b74659d3181772373eac23473ac228859a0ab8f1b6814637dc7f88b9015058a87a0aa1ce52f174b940aeed39b842fe52813d1dff1493379e14b2d188cfb19ce141faaf361e08c41afed6aeb68694725e4a7da9444d94ddf8a0a90066024447ab1d3ac4a4d2159047391ee9d1edb2516d40fbc9276957804563ea7f1acc92854b12bb8ba24cda6f11335ea7b88491883820e637afcf7df7bcec4611b4a532123533b59fd6e6758b02265d51c4b6e9f35a079fe93d73889910e606f5499f6b0e2c69f0ad2d5330254e9fc01e1cf6078e499208a44a7f9dec43b1d19ad62b11bf0dddf8c08b02ae24b771f30bf280903e9df9b97627f30e81e085f7ce8f0e540500eeaf2af13b945ff792fb0f7330c13e5d399305d19254881ad5dee59232c1c54e7d068fddfac69105f314d6bcd1959fd5d67dd7198f6b6912447b816b091815a1cd1fc4765f25b8e6974419d272a99badb9b226f8bf7cf3a7fdc670899d3f5a0f785cf686d5bf9f388ebb5f697fea841ef3690652a6b2ede1adfc2347b8b7f9897a523a3422b5bb3203b22fafe5996b91c64df2788dc9c9053ce0e27fcc9683563e82bd9497b70cfe747eda866bde0ce503e1afe32960ddd5d26a39995284758d6512ce0e124057833a67a0096a43336ed6cf5ae906378346606e27eb63ede50f666c27e00f8a2aea0042e348094fbd597b1ec1356d680290c4097c103070ba3df10c5c7445f8550af1361d701199fcfe7f79b4f7d947a06b64bbf60d33c0306f73bd3fb9e012681023d234c5d8927702e8ef643693b6d670791177bd7b31731bd351aa1a59a7cd1160772b0558a96a0ee21af013f0d84bda1542358ef0bad052f313853e0f32b43153200daa4bc5c4f51a314ead071cf67bb8177560bad893ff28953758441b6b2d909a35db8ab60a7bc798524ec75a53d0e5d43aff61827aad8b7584118152e3c7dbea9668133ff5ced4e8c70b2974afaca774e5dccbb3892a20c78682f8b9a716f3bc3c264ba3f1b5882f3a38669385ba6db9816c9cf08f462a6272a6c37649b6a40826ab7ceb2605f69e1bf65d0747163111f6897a1c85f10f1bf4a8aaf96b29ed15cd32fa24cac2ddda49d0fcde093c10e77fbcdc20c565ef2da60828ff953f2b82d7ed15c20ac2781708bf56cc551ae1bea960d7979f55fba87b67e5b76e48648503f84db9cf6dd44a799e28da8852082f06395a5da958be0d0c2ba74fcfddd525b565502f1709e5f9e51893974c890f39b2406c111442fba90f48739821e9908fd446f55aae6a7c00aec7c4ad2dafa911053ff49f57d79a8b0eb1747f40eb15ffa7aca8fc303460b16d448e74fae08d4b7434a86d4f6e2acb6e9ccac8ad3e6706de64c750d17d93261a2c34e69b55131604f4de452c6c08c2635dee21c6896c9d696706088155941ddb006f8d7b85978787f34200426488b433b3ad6906bb950b986267870289d2bffe1e0887ce3d9326af20b66fb230d4ace95c11536243a3b1f1ea00108f9c354a16ad3fab45f6ae536d3bdafad2712e9ff7184a80b7555cc506b2b094f01b73bcdee9cfe7483352e196346907f7c07931bebf967ee4798825a018d3565c29d27205e57347ba3498cb33e926809e8ac625b2c52afca8705c44ff8bd3e413fc3260dfa2ff4a099bfb074c4f77697581bb271a076e92bf8e26d4175ee95eae3af28a9ffe8abf59562d4a8d9766794e2347e6f07d7642a64d019bf6c0f96c6269a0787976b8c1446555dc66983d5a4ffa13cb7f5e47a0142cef49f28eabe8c1f3045a112bb841f2ac5ea79ccaea80b60dcb182e5c52535556702eef9a3338ce164d4fbf5c285d15ad307ae86315f1b122505841f7d8b09ec2facf4dfbc3a8253b5f0fe44fef960ecffd251e8ddb8f56b9ffa8f1da238961eafed5feea260000c8104a96541f9197e867534e81cf36850036676588e23a1035482014905934c9d49bc302bb9e9fbaf56008e27c3899bc4c56797a2de50887e6b770b848ac304317a1cfe408928016892e06a5d62272390fa5aec7c45a6e936d20ff009a0946d64acc35c542e2f6e4c7bd2c0e71bc93b76c47feb6474e5a9d2f7be3b0ddc67e82341d2cfe8314c2ccb587b4dc63d10eaf5e13afc1ed0fd9abd4f52a225cf2ebc5cbfac192440c754fbd3df589e72e03c05b7f120c85aaf82c07ab055345c61ab416bf385dbcd14c34e2a2e562970882a6f8e2bceb8a24d59c7db40edfafb3e66f44496b8575de7405b2d9fec42b40ef142efec36cd271b6207b6c668d24965de5ead6daa861679e0ff97185c841ea6865887c43fe44be254d2cf300b5b608d1bf58bf35866e10b178a35cf740cbff0c649e80851f130e00e35ea751f3e28dc835f1966d26bad82aff363925ab93437ea172b699e72e8949d6734f35b8556b138dadcc839797aca2a1e64fb63369a20007507b8af45cc0c66f6ded5d45e1c818bc89de4ce4298f098e35fbaeccd65e6508495acff22980bc3229fa863faf48e50be1bef352c0371874a6dc41799ac6686d80f214c900d6cb03769255537246dc3db2e61e119745044f5a52389dbabe153efcfcb0b6d3ff779a367e99a55b046aec47715b32a34b693bf2591ba71c0a03e1820fc9cacd15f2a0f5fbcb8d6f1401e3198910ee241463627e22093178a44c6ab0030436fbb4bcf580276120fc79b97fb2d73b9f26a1d4d37da7db64caa8b9f30fb1002d5e1eaf737373a9f203732547c4ad65d40fa91dd0e084c5dfce72e481349988474a443a15fd0b380fd1934346b1bd4cee07c021313dc69eb6888bf113c414310c7ad2bcd7e90663468d9d6cd5a3137d4592fc7bbcd076cfda7d7a846512025979c93216f046a6b4f77807a17caa183fd885a99646612f9f5c612281f4b08f86b8ac2fcb8695a6dcdc82e19cb239b6b757abf7bb93c1a3a0c70f05fd4884b19c6560f1e233ca3d03156338404a5b29fb34cb96cc2c21ea5bfd776ab4c900f63249417df63d301c7c789a08cfcedb44a10dd74265afdeeb84b3bb73d45d632b9695991d416b0d84764ef89259632ae961c10747e99f986589f9287e20b2616fc3c6c4fc3e51888c868b18b117fe3c7b37760bd324614c7238d433f3885346871a3746c6ca983c4712e9762b57cf570f42e9afe954338783d479fa3af9ccc3f4bb90ac2c0e4e253e7b54bf594a49d2f99b9f1d2b4b5f33e1472e4699010a562833905493dfda63216ab26846b076fc80291452f4314c2a6b52473af7a9133343006e62ce7f0a9696e8f4c874af2ec034271e644ed0b1d54bda457e83e9ed2ec4ab1318726729811fe8828f28c18727d195c5f46980182e790ad974c9418aa52a1b24b487c9f527a8290b455d759688f348f3815af29d197296173e027650c0f00da2e4a246dc42343ef6f998b08743813d2ddb9d6c9bbe4621300d0dd15560da9f34c07fe21f1e310be5fe936b6723bda266122d3831aba433a3951b92990d0546048cfd731a5d18ffa8e935d6a1dd56763f4caa2848ba46788a8ec29608d25c463d9d6cded45ae8a3d0f3b3b9aca3ff94e23281ff8cf500a245fc784c5afbd226f9becd9fbed3ddd44aa26ce1c5b8bbfd433a7163bf5f280139244cc7e50f84c773588c0a2f58627a24db7d3d5bd17f32072e8300bdd0344d7080b9877343f241a1f02026b9b8399267e2ea588c01ab0a3e0f942e37a051fa66fd148dd48a804a5ff80b5ac6bfe27083e11545eca3e403a0ce4ace2a24c6058b2dc75226260eacf5224ce18743f54e19f8dbb5b0077848b999a036077fe2fb4efcf7e03538dfe79d1fbed137d8c15c84694d582c7e5b0e6bcb8cab04097a2e824fb25c6b5d5506e3e4086a694d281ccdac65e96eddaf131d46f2ad5105e1ccbb1bbd9239cd73ec105c8d1636cc3094701ce826c1f2331e4d85870b7639e4e2cb4e13651b1b66c558df71d288187c8bbaf7137689d6324931cce22eec300bb2083e2abf274dd3f34309040aa006711277657c1b1ff5526d765cacbf91b22cdc755ed44901508c10de333dd126fc4b890cc9cb035a6ddf915ecc3c805a9bff67d901e4f5aeb4353c5ed1ef6f92590b0362acae8a8a54b3959d542a588432112aaa7a8a297930a352656f4e5565c10dbbcdffddf6125a4d2c1043f2feb6d31e3acc9ce2c9e374b28c602b01cab72768658b77bd7e0706cea5dc069fd700b0e29ad04eabd8fd579a80c3f39482d3ac338574e0c548e45fa649873ed7a684dce43f5bd023b5aa5eeb52f8c08dceef8644d8c553cb45d6bb0aa1c7adc928d47ced61a17eed3d869b9268decd67a72aa844c9e05eba7a88d9bdcdd78517a27e2c4c2021d589ad848f1c37d52e40fc8c0430b49b3d15cc9d7ec4123fee314dc5e67ffba13afb85ee7c3b8f0be23b801a7a56fccf281880ed00e46f425f33c9c7269e9185851625ff2c93d94f2c6cfb54376f4a0945e2aaae69b27877d034afcebb5a4427af74949a0e1c26ed295e59b0e7ad350528b8e5faf862ab81e8700c25990e7d3b8687513a059cee1d316aacb7f066851db7f46eca8f7ef09cf55a386b0921cf62a005920888512e9de8606696e320667ce594987be25a3b4e0ec1bfa799b1beb23b32eb6ef30b9b6bd41f5fea792afd383785d3bc22a6a4ec99f6954ed18193d4bd34007eb6a3a7c0867f000195d972cbefd71abce2aafd346b786bb0a4d7c71992bb25d8dedfa1b2e0f081f0a7481acd86bff78b34a23a7dc7db92026dd1ebcf59d04e99106ad46ecc04681af67bef188960bd77229a881492eeb2bafe5c224be28e339b54c53c4fb432bbe244b2598899fc9ffc3276c5a6325a582b60e9788933040af7815df6817cdbd4b640cdd2a9a4cb9389ec7b93839ae9f00cddc42294da71b935870841debeba960871221b47068ae1be1996fbbb59b1c447b7573f8601aca223ffccddc18b64ec92760c847b112a8fe7bb1dee83c740e598a70dcae0060f0dc81f34c0aa9d632680b4547fbe8f314546bc1f1cdf5dd2d63208b4f7991a0069486eae07cfed63aebcb7370d0a923b3c074d5b7fae5f5d7fb0e430a9c077c8d47156626df0c9ee4c18e4294ba7dedb9f847e2767df8987745dd4e7a4eaf03b695676879bfa0b96cb184645963f9a9ea70aa3b1328237f5d8e508571d6e06c7e7590a8b79567c39195bffc83c81055d170c59219dc26756b1e72e64d32e1247812e18694bf4e62fe65d5c1485b59effa289bc939ce4b2c9a0bb353b6f0ca529b90fc47b8776be1b036a63da934bac5a5fb91af74ba1128882bda602a8a05e2c890e52f2e627275406fcb701608469ab5a0cd57743aef63a33a7edba3433efa5c49d03e20b17e221f1cc45", 0x1000}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 606.576839][T17235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:34 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) times(0x0) 21:47:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)) writev(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:34 executing program 0: keyctl$join(0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000200)=""/86}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) 21:47:34 executing program 1: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 21:47:34 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f00000007c0)) 21:47:34 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000040)='B', 0x1}], 0x2) 21:47:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f00000002c0)=@hopopts={0x0, 0x1, [], [@generic={0x0, 0x6, "8ca3c3f42e4d"}]}, 0x10) 21:47:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:47:34 executing program 4: pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 21:47:34 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000000000060003003f000000060011004e24000005001600020000000500170000000000050008000000000008000600ac141419"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 21:47:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r0, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x3, 0x1a000, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="090700000000000000001f"], 0x14}}, 0x0) 21:47:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2d05}], 0x1}, 0x350c) 21:47:35 executing program 4: pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 608.138537][T17296] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:35 executing program 0: keyctl$join(0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000200)=""/86}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) 21:47:35 executing program 4: pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 21:47:35 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0xfe, 0x0) 21:47:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r2, 0x0) keyctl$describe(0x6, r3, 0x0, 0x0) 21:47:36 executing program 4: pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 21:47:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2d05}], 0x1}, 0x350c) [ 609.057841][T17325] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x110}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 21:47:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2d05}], 0x1}, 0x350c) 21:47:37 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:47:37 executing program 5: unshare(0x40400) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x5) 21:47:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2d05}], 0x1}, 0x350c) 21:47:37 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4188}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = dup(r1) bind$tipc(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000001c0)={{0x9, 0x38}, 'port0\x00', 0xa0, 0x800, 0x6, 0xfff, 0xfffffffd, 0x4, 0x7a, 0x0, 0x1, 0x8}) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7fffffe) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e9, &(0x7f0000000180)='\v') 21:47:37 executing program 0: keyctl$join(0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000200)=""/86}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) 21:47:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', {0x7, 0x0, @private}}) 21:47:38 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:47:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/106) 21:47:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="ce", 0x1}], 0x1}}], 0xd, 0xc071) 21:47:38 executing program 1: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x64, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '[\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}]}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1dd, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}}}, 0x1fc}}, 0x0) 21:47:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 21:47:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003e40)={{0x14, 0x10, 0x1, 0xb4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x5c}}, 0x0) 21:47:39 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:47:39 executing program 1: syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674047367a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x8, 0x0, 0x0, 0x0, 0xd], 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0f04e6", 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@routing={0x3a}], "80895bf600000000"}}}}}}}, 0x0) 21:47:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405cb4aea5fe7fe098366f8a6b696c7ed3fcd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492bcee00a06dc9d8e99adaf81dc35d3fc6afd98676fc6ef176ed6769b8c23fb5f1a37345aef8f9fc0ebf8b0b116f424e0909fbcb9489c0cb7979e8317b4eb5af96766b4ec292bcab277dd32f2349fef28dca910538c395ad2fe495fcc84263b", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:47:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x0, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 21:47:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x0, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) [ 612.378248][T17421] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT 21:47:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x80}}) close(r0) 21:47:39 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) 21:47:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000b00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002d003f02000000000000000700000000", @ANYRES32=r5, @ANYBLOB="1ad30100000000000000f1ff67cab9ecd81391d5676818c69f9ef6cd1e40241931a952fd0177ad27991bad80665457d261edad6ff00e8bd4c853705faf35cdf710a60d46d28224b6a1"], 0x24}}, 0x4) 21:47:39 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 21:47:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0xa, 0x6, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r0, &(0x7f0000000040), &(0x7f0000000580)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000000c0)="c1", &(0x7f0000000200)=""/91}, 0x20) 21:47:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000b00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002d003f02000000000000000700000000", @ANYRES32=r5, @ANYBLOB="1ad30100000000000000f1ff67cab9ecd81391d5676818c69f9ef6cd1e40241931a952fd0177ad27991bad80665457d261edad6ff00e8bd4c853705faf35cdf710a60d46d28224b6a1"], 0x24}}, 0x4) 21:47:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x541b, 0x205001ff) 21:47:40 executing program 3: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102400, &(0x7f0000019580)=0x19000) 21:47:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x80}}) close(r0) [ 613.332964][T17470] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT 21:47:42 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044325, 0x0) 21:47:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405cb4aea5fe7fe098366f8a6b696c7ed3fcd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492bcee00a06dc9d8e99adaf81dc35d3fc6afd98676fc6ef176ed6769b8c23fb5f1a37345aef8f9fc0ebf8b0b116f424e0909fbcb9489c0cb7979e8317b4eb5af96766b4ec292bcab277dd32f2349fef28dca910538c395ad2fe495fcc84263b", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:47:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x5, 0x57) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffbf51bf}, 0xc) unshare(0x60040000) 21:47:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000b00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002d003f02000000000000000700000000", @ANYRES32=r5, @ANYBLOB="1ad30100000000000000f1ff67cab9ecd81391d5676818c69f9ef6cd1e40241931a952fd0177ad27991bad80665457d261edad6ff00e8bd4c853705faf35cdf710a60d46d28224b6a1"], 0x24}}, 0x4) 21:47:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x80}}) close(r0) 21:47:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x0, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) [ 615.375363][T17498] IPVS: ftp: loaded support on port[0] = 21 21:47:42 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000000)=0x120000000002) 21:47:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x80}}) close(r0) 21:47:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000b00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002d003f02000000000000000700000000", @ANYRES32=r5, @ANYBLOB="1ad30100000000000000f1ff67cab9ecd81391d5676818c69f9ef6cd1e40241931a952fd0177ad27991bad80665457d261edad6ff00e8bd4c853705faf35cdf710a60d46d28224b6a1"], 0x24}}, 0x4) 21:47:43 executing program 1: semtimedop(0x0, &(0x7f0000000200)=[{}, {0x0, 0xfe00}], 0x2, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 21:47:43 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x80000000000004) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="e847a01ba6b0fb9dca1c17e60aed70c305203a08b555235658be1b8280d0654ba6e6181301f1744611f66678f384021a2da65f73555ab754a3d987f9434248cda7403a992868aad1", 0x48, 0x0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) [ 616.000510][ T1052] tipc: TX() has been purged, node left! 21:47:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x0, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 21:47:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_port={0x1, 0x15}]}, 0x80}}, 0x0) [ 616.280342][T17574] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT 21:47:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405cb4aea5fe7fe098366f8a6b696c7ed3fcd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492bcee00a06dc9d8e99adaf81dc35d3fc6afd98676fc6ef176ed6769b8c23fb5f1a37345aef8f9fc0ebf8b0b116f424e0909fbcb9489c0cb7979e8317b4eb5af96766b4ec292bcab277dd32f2349fef28dca910538c395ad2fe495fcc84263b", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:47:45 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) r1 = dup(r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x82) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1fe, 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffff8) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x80003) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000280)={0xffffffff, 0x81}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r2, 0x0, 0x8000fffffffe) 21:47:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x40}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@setlink={0x38, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:47:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x22, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800e6ff1300010000000000", @ANYRES32=0x0, @ANYBLOB="047cb956ba000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'bridge_slave_0\x00', {0x2, 0x4e23, @broadcast}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) link(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x28008080}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:47:45 executing program 3: socket(0x0, 0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 618.604464][T17589] kvm [17587]: vcpu0, guest rIP: 0x108 disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 618.696793][T17589] kvm [17587]: vcpu0, guest rIP: 0x108 disabled perfctr wrmsr: 0xc2 data 0x0 21:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x60e41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x25, &(0x7f0000000080), 0x20000088) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24}, 0x24}}, 0x0) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) 21:47:46 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "c69c79a8fd9672ceec907e92e68e2c0c322b9de645b5b3290858f6d680596801"}) 21:47:46 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x80}}]}}]}, 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:47:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x44}}, 0x0) 21:47:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x60e41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 619.188172][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 619.315193][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:47:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405cb4aea5fe7fe098366f8a6b696c7ed3fcd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492bcee00a06dc9d8e99adaf81dc35d3fc6afd98676fc6ef176ed6769b8c23fb5f1a37345aef8f9fc0ebf8b0b116f424e0909fbcb9489c0cb7979e8317b4eb5af96766b4ec292bcab277dd32f2349fef28dca910538c395ad2fe495fcc84263b", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x60e41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000007c0)=0x3ff, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xc8, &(0x7f0000000040)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @dev}}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, 0x0) 21:47:48 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000380)=[{}, {0x0, 0xffff}], 0x2) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1f}, {}], 0x2, &(0x7f0000000080)={0x0, 0x989680}) 21:47:48 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="23000000660007031dfffd946f00000020200a00ffffffffa61d85680c1ba3a20400ff", 0x23}], 0x1}, 0x0) 21:47:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 21:47:49 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000f41000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 21:47:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000b00)={0x1, 0x0, 0x9}) 21:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x60e41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) socket$can_bcm(0x1d, 0x2, 0x2) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) pipe(&(0x7f0000000200)) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 21:47:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001200)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 21:47:49 executing program 0: unshare(0x2000400) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 21:47:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x44}}, 0x0) 21:47:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @private}, {}, 0x8fdbf1f744b9cbbb}) 21:47:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x58}}, 0x0) 21:47:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private2}, {}, {}, 0x0, 0x0, 0x0, 0x62178ba37ae886a2}}, 0xb8}}, 0x0) 21:47:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x81, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 21:47:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 21:47:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 21:47:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffd52, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0) 21:47:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() r2 = gettid() timer_create(0x3, 0x0, &(0x7f00000000c0)) migrate_pages(r2, 0x4cc, &(0x7f00000001c0)=0x1, &(0x7f0000000240)=0xe934) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) syslog(0x3, &(0x7f0000000280)=""/62, 0x3e) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ftruncate(0xffffffffffffffff, 0x200004) 21:47:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = memfd_create(&(0x7f0000000040)='\vee1\xc1\xf8\xa6\x8dN\xc0\xa34\xc7\x8f\xaeAg\xe5#\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)=ANY=[], 0x18) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() r4 = gettid() tkill(r4, 0x1004000000016) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000100)={0x0}) 21:47:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 625.108672][T17812] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 625.323348][T17818] device bond1 entered promiscuous mode [ 625.329959][T17818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.348245][T17820] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 625.474332][T17818] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 625.539523][T17813] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 21:47:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffd52, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0) 21:47:52 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 625.765561][T17870] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 625.865073][T17910] device bond2 entered promiscuous mode [ 625.874225][T17910] 8021q: adding VLAN 0 to HW filter on device bond2 21:47:53 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0108000000000000000007000000080002400000000109"], 0x1}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 21:47:53 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffd52, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0) 21:47:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc", 0x9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_ATTR(r2, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 626.327005][T17921] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 626.494079][T17951] device bond3 entered promiscuous mode [ 626.500701][T17951] 8021q: adding VLAN 0 to HW filter on device bond3 21:47:53 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:47:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffd52, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0) [ 626.832664][T17972] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:47:54 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in6={0xa, 0x4f24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff3}, 0x2003) [ 626.920396][T17972] device bond4 entered promiscuous mode [ 626.926820][T17972] 8021q: adding VLAN 0 to HW filter on device bond4 21:47:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x1a0}}, 0x0) 21:47:55 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a40)=ANY=[@ANYBLOB="7008000024000705000000000008000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007462660044080200080006000000000000000000001204040200000000007557000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d10325310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000083840000000000000000000000000000000000000000000000200000e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cda43876e3a06efe93e1a6bbd149b1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f5336a14b33a78e02588b0867380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001091f9650e4f038416000000000000001000010000000000000000000000000004040200000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000fa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000237c6b7400000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009885a519e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff18b85ea4b5bb92e9a3821c92b85890da2aa0eaf91cf7fbc3154a130674ebdaaebc4f8b2a0fb09676421f0f0ba5cc6865df08f57312dabc4813edafeb921a83272b91e18c095987aadbc44d0de594cfff7be4589afa42494a2fa358f5ea6341136e147c13b337f8d0cc030f8a04f8236b12275ecc5ae577911d476f34c541b6d9cdc0de8d53d76d2102efe76f5881d91b020a17f8315da91ff05ba8ae085246a9762e80235b00ccb73e83ced0a92284970c699066597926c9bca43fe8195036d56e452db21c82df3bf14d445b7d181302dd62909422df2f37836c682cc4491eedc01a220874e80af7cc990882a0be5d17dde29b1732ef72316bd1d40da0dc170afb5e1d424366ba11e8a43554075c302f7adedd5a9e07f502e383cf142baa304de986f48193be0abcee13e24764f38092f5b1e69ebfec8e3c38b2a217ae278a14ce8d20b43560e81f667c40fde86169ed5814c8d99e5b068d45adade3cd83936027bd6758f68d6011ed3bc0fcd2855400364e54c4e04e66e97f81bfefe457ab147a85883e8e5a79397a56d155c2afb90b639b7bf283ce56c68b774702f6bc9f7bfa2e9fcb4b3e24c7f8303e75711b0b12a45a4a9a1f7efcc271ee8b8a64f0740ffd205b9e79d5356dbaa1d78f1284dd35f3396c04bc720b6d7873208ea5f88747a1d2503d85cac7a82e4d29d1cfb10c8868ca5440bfa6acd055cd77623e72fa7cbf4ef4aaf31c4f698a31c4d58f4b0600f899ed89f3b00ee647b30b90977c24366ee2870e7c8be8be935582611f38ca919e1df22d6dff8113dbf26d75f0a7f0bfaaa5694c8c250e6f8aeb49308f672626aae79b2558f77842760000000000000000000000000000bf26fe8f66a7cafe0f3e105a35e639c1a50cbe45f515995ea59d6ea4b305c9a8ca1ffc0f0e867a520d230e3be1297c6e9c147d6ef354a1003fb0516f09f589200887a6ca9864fea24e1df57a5b5ab41403b8edd42146db76c58f6544737f20220ee7832ddb6d618a3fdedf4a0230991bba03400e3d5f91a703b67d61c7b3b9a391435583fb45ad10c9c8d4125edca3334446321594809f8c88c0f9761fa20c4b5dc2d8afc943b80fa7bb7c541d0c622ff1efc53a11266ca0cda68bf946b17f272818a0f2748d8e8500ec69dc1e00b924b86b254301e8a0985942bb6f30de1c188d043efa8b4410758922fb77fff30aa20836469ff105"], 0x870}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:47:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x0, 0x148, 0x148, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) 21:47:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x1e0, 0x1e0, 0x2f0, 0x130, 0x2f0, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 21:47:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) 21:47:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) 21:47:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x1e0, 0x1e0, 0x2f0, 0x130, 0x2f0, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) [ 628.234743][T18028] ipt_ECN: cannot use operation on non-tcp rule [ 628.249270][T18026] netlink: 2104 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) [ 628.380819][T18036] ipt_ECN: cannot use operation on non-tcp rule 21:47:56 executing program 3: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)='4', 0x1}]) 21:47:56 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x3, 0x400000, 0x4) 21:47:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000680)=0x10000) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 21:47:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x1e0, 0x1e0, 0x2f0, 0x130, 0x2f0, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 21:47:56 executing program 0: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000110000000000000081006263736630000000000800000000000073697430000002000000ffff00000000626f6e64300000000000000000000000766574382d863573e35cea0000000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff03000000000000000000000000000000000000000000000008000000000000000100000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2b0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x2, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 21:47:56 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x4, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 629.386070][T18064] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 629.395506][T18063] ipt_ECN: cannot use operation on non-tcp rule [ 629.408386][T18062] ebtables: ebtables: counters copy to user failed while replacing table 21:47:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r1, 0xb575fe7240c4e1df, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) 21:47:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x1e0, 0x1e0, 0x2f0, 0x130, 0x2f0, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 21:47:56 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820"], 0xf9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000008c0)='(\xcf\x11\x16\xc0\x83\xceC\xcc-\xcffv\xd0\xe7\xb4h8\xc9\xfb#\x16)\xf0\xc3\n\x86\xf1~\xe9\xabHe+\x9c]8}2\xc34h\x13\x15R\ax\x9e\x15b\xa2\x94T\x01!\x11\xb1\xa9\x9f<\xf8e\xf7\xfd3\xb3\xa2\x95\xfa\xf1\x13\xfe\xb6\xf3\xa0\x87@f\xa29?\x8bl\x15\x15\xed\xc8\x8cj\xa96\x19:\x1b\xab\x16\xab\xce\x1b\xbf\x14\xc5\x83[\x8d\xf6\xbf\x81\xe1m\x83\xfb\xac6RI\x0e[-\xff\x00$\xdc\xe1\xe6\xe3\xfb0\xc9\xe2\x0f\xe6\x97o\x7fl1\x8d\xb4m\xeb\x0eP\xdc)\xb0\x99P\xd4\xd3u7W\x12\x00\x86\x95\r$\xf9E\x00\x00\x00\x00\x00\x00\x00\x00n\xa6m>|\xfa\xd4V7\xb2\x18\x86\xcd\xd9X\x88\xa0\x81/\xd0|\x18\x16C\xbb\xbfN\xff\xf0\xde\x11\xa8i\xb6<_\x9c\x88Il;\xeb\x12\xcc\xc7\xc4\xcd\xe5\xeb\xd6\xaa5\x96M\x1b\x11j\xfe\xf2\xd28\xa4\xf258\x9f\xab\xcd\xcf]9G\xe2\x04k\xa54fQ\x907\xd6\xf2qb\xbe\x00\x00\x00\x00\x00\x00\x00\b\xc2vpB\x90\xa53\xc9\xdff\x19G\x17f}\xfe\xb0\xd2\x89\x0e9*\xe5q\xd5\xa9\xc0T\x85\xf0\xb0\x86\\\x8f\xa7|\xfa\v]\x89\xb9oJ\xd6\x85\xf4\x15\xb5\xc7\x84\xb3\xc6\x95 \xd0\xd7\xf9X\xbe\xb1\xdf\xb9\xd9b\x8ay\xd4\xc2\xb9\x1fs\"o\xa7W\x1c\xc4\xc2k\xc8\xc0,${?\x84\xbb\xb1i\ab\xe8\x00e\xacZH^\xe8\x91\xae\v*j\x90\x1dA\'\xf3\x8e\x84\xaa\xf92,\x8e\x0e\'\x86\xe3\xbe\x9f\x83]\xa2w&\x87\xf84\x9eMX\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xae\xf6X/,\xf4\xd9r\x06%J\xe8\xe8\xb1\xd0\x83\x8f*\as\x10\xa5\xa6l\xb8V\x06\x86\x86\x95\xb9\xcf\x8f\x85\xf9\xf2\x1bWh\xf2\x01\x1e\x11\x90o\xc4\xd3P\x80RQ\x8d_r?\n\x12@\xc6iG\xaf\xad\x18\xd8\v6\xf8\x81$\xe6\xa4\xa4a\x04\x840\v\xd6\xc4\b0Fw$\x9a&\xce\x8dpu\xdew7\x83\'\x13nd\x1f\xc5\x06\x1b*.\xafLd\x89\x98o\xc0\xda\xc7\x8b7z|\x9a\xedM\xdd\xa4\xb8;\xafor\xad\xb9\xdcV\x94\xe6=P\xe6\xae\x89\xe5\xbd\x8e\xd0\xea%J\xce\xf7\xbc\x01/\xe8\xd1\xfd\x0e\xa2\xebI\xaf\x1c\xda\xa6?\x1a\xe8v\xa9v\xcd\x9f\xa8\xfe)\xda\xee.\x98\xa5\xc5\xfbY\x83\xd0\x00>wO{\xf1QA\xe1\x1f\xbd4V\xdd\x05P\x9fn\x87\xce\x86)\xaa&\']\xd9?R') 21:47:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)) 21:47:56 executing program 4: r0 = socket$kcm(0x11, 0x8400000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000140)=@caif=@rfm={0x25, 0x6, "7c7f5422e16093ce67dfc611bf559c00"}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001800)="b6832e006e2cec1631ff9f360df586e7bc65bc84c4d788c9651be2aa41bf7018f31778af7891ac3f0b002fa24d0b435647fd2ffc65307c0be43cf9fdc4fd97888bfbada3bc89", 0x46}], 0x1}, 0x0) [ 629.758216][T18080] ipt_ECN: cannot use operation on non-tcp rule [ 629.765009][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 629.765138][ C1] sd 0:0:1:0: [sg0] tag#3302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 629.765252][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB: Test Unit Ready [ 629.789271][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.799157][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.809032][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.818895][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.828790][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.840219][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.850155][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.860045][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.870315][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.880161][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.890423][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:47:57 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000020c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) [ 629.900358][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 629.910225][ C1] sd 0:0:1:0: [sg0] tag#3302 CDB[c0]: 00 00 00 00 00 00 00 00 21:47:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x101) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae9c, &(0x7f0000000080)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0}, 0x0) [ 630.046961][ C1] sd 0:0:1:0: [sg0] tag#3303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 630.057722][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB: Test Unit Ready [ 630.064500][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.074346][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.084232][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.094089][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.103935][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.113792][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.123658][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.133537][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.143408][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.153283][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.163153][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.173037][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 630.182921][ C1] sd 0:0:1:0: [sg0] tag#3303 CDB[c0]: 00 00 00 00 00 00 00 00 21:47:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = timerfd_create(0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup3(r4, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:57 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000100)=""/116, 0x74) lseek(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) 21:47:58 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 21:47:58 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x3d, 0x0) getdents64(r0, 0x0, 0x18) 21:47:58 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000000c0), 0x0) io_setup(0x2, &(0x7f00000004c0)) 21:47:58 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000040)=""/1, 0x8}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000280)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x20040884) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xf9, 0x9d, 0xfe, 0x6, 0x0, 0x2, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff74af, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0x8200, 0x0, 0x0, 0x4, 0x8, 0x7fffffff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 21:47:58 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x400002cc1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) 21:47:58 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)=""/145, 0x91}], 0x1, 0x0, 0x91}}], 0x1, 0x0, 0x0) 21:47:58 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4) 21:47:58 executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16, @ANYRES16=r0, @ANYRES16, @ANYRES32], 0x5c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x5, 0x0, 0xf000}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000042) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x50a, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x2000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) 21:47:58 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 21:47:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 21:47:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 21:47:59 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1746], 0x310) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 21:47:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fsopen(&(0x7f0000000500)='xfs\x00', 0x0) dup2(r1, r3) 21:47:59 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x400, 0x8}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x1081, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/168, &(0x7f0000000180), &(0x7f0000000b80), 0x6, r0}, 0x38) 21:47:59 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 21:47:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 21:47:59 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 21:47:59 executing program 3: unshare(0x40400) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) 21:47:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 21:48:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 21:48:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 21:48:00 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 21:48:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) poll(&(0x7f0000000940)=[{r2}], 0x1, 0x0) 21:48:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 21:48:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 21:48:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa8, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:48:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2}) 21:48:02 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 21:48:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = creat(0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x4) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x453, 0x10, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xedc0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000380)={0x3, "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"}) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x40000060, 0x0) open(0x0, 0x585602, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x1) 21:48:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r2, &(0x7f0000000740)=""/384, 0x180) socketpair$unix(0x1, 0x2, 0x0, 0x0) kexec_load(0x0, 0x0, &(0x7f00000000c0), 0x70001) 21:48:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) [ 635.377777][T18220] use of bytesused == 0 is deprecated and will be removed in the future, [ 635.386961][T18220] use the actual size instead. 21:48:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000018c0)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8}, @IFA_FLAGS={0x8, 0x8, 0x401}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 635.783521][T18215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 635.861324][T18215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 635.872035][T18215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:48:02 executing program 0: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x7530}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4}) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x3, @win={{}, 0x2, 0x0, &(0x7f00000000c0)={{0x0, 0xa}}, 0x5, 0x0}}) 21:48:03 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001340)={0xa0, 0x0, 0x2, {{0x100000000000007}, {0x0, 0x0, 0x1000000}}}, 0xa0) 21:48:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x7, {0xfffffff9}}]}]}]}, 0x3c}}, 0x0) [ 636.290780][T18234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.350556][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 636.377549][T18237] CUSE: info not properly terminated [ 636.449733][T18241] CUSE: info not properly terminated 21:48:03 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x8, 0x3a, 0xff, @local={0xfe, 0x80, [0x5, 0x10, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_rs}}}}}, 0x0) [ 636.490911][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 636.521492][T18245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:48:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_channels={0x0, 0x0, 0x0, 0x0, 0x5}}) 21:48:04 executing program 5: socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000000)='ip6gre0\x00') 21:48:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40d9b31", 0x51}], 0x1) 21:48:04 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x3f365340, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 21:48:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f", 0x7) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000000004ffe0, 0x0) [ 638.230395][T18270] ===================================================== [ 638.237371][T18270] BUG: KMSAN: uninit-value in bpf_skb_load_helper_16+0xd9/0x2b0 [ 638.242213][T18270] CPU: 1 PID: 18270 Comm: syz-executor.0 Not tainted 5.7.0-rc4-syzkaller #0 [ 638.242213][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.242213][T18270] Call Trace: [ 638.242213][T18270] dump_stack+0x1c9/0x220 [ 638.242213][T18270] kmsan_report+0xf7/0x1e0 [ 638.242213][T18270] __msan_warning+0x58/0xa0 [ 638.242213][T18270] bpf_skb_load_helper_16+0xd9/0x2b0 [ 638.242213][T18270] ___bpf_prog_run+0x214d/0x97a0 [ 638.242213][T18270] ? __se_sys_splice+0x426/0x520 [ 638.242213][T18270] ? __x64_sys_splice+0x6e/0x90 [ 638.242213][T18270] ? bpf_skb_load_helper_8_no_cache+0x340/0x340 [ 638.242213][T18270] __bpf_prog_run32+0x101/0x170 [ 638.242213][T18270] ? kmsan_get_metadata+0x4f/0x180 [ 638.242213][T18270] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 638.242213][T18270] ? ___bpf_prog_run+0x97a0/0x97a0 [ 638.242213][T18270] sk_filter_trim_cap+0x42a/0xcc0 [ 638.242213][T18270] ? __netlink_lookup+0x8b9/0x980 [ 638.242213][T18270] ? kmsan_get_metadata+0x11d/0x180 [ 638.242213][T18270] ? kmsan_get_metadata+0x11d/0x180 [ 638.242213][T18270] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 638.242213][T18270] netlink_unicast+0x4b9/0x1100 [ 638.242213][T18270] netlink_ack+0x105c/0x11a0 [ 638.242213][T18270] netlink_rcv_skb+0x321/0x650 [ 638.242213][T18270] ? rtnetlink_bind+0x120/0x120 [ 638.242213][T18270] rtnetlink_rcv+0x50/0x60 [ 638.242213][T18270] netlink_unicast+0xf9e/0x1100 [ 638.242213][T18270] ? rtnetlink_net_exit+0x90/0x90 [ 638.242213][T18270] netlink_sendmsg+0x1246/0x14d0 [ 638.242213][T18270] ? netlink_getsockopt+0x1440/0x1440 [ 638.242213][T18270] kernel_sendmsg+0x433/0x440 [ 638.242213][T18270] sock_no_sendpage+0x235/0x300 [ 638.242213][T18270] ? sock_no_mmap+0x30/0x30 [ 638.242213][T18270] sock_sendpage+0x1e1/0x2c0 [ 638.242213][T18270] pipe_to_sendpage+0x38c/0x4c0 [ 638.242213][T18270] ? sock_fasync+0x250/0x250 [ 638.242213][T18270] __splice_from_pipe+0x539/0xed0 [ 638.242213][T18270] ? generic_splice_sendpage+0x2d0/0x2d0 [ 638.242213][T18270] generic_splice_sendpage+0x1d5/0x2d0 [ 638.242213][T18270] ? iter_file_splice_write+0x17b0/0x17b0 [ 638.242213][T18270] do_splice+0x1eae/0x2ec0 [ 638.242213][T18270] ? kmsan_get_metadata+0x4f/0x180 [ 638.242213][T18270] ? kmsan_internal_set_origin+0x75/0xb0 [ 638.242213][T18270] ? kmsan_get_metadata+0x11d/0x180 [ 638.242213][T18270] ? kmsan_set_origin_checked+0x95/0xf0 [ 638.242213][T18270] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 638.242213][T18270] __se_sys_splice+0x426/0x520 [ 638.242213][T18270] __x64_sys_splice+0x6e/0x90 [ 638.242213][T18270] do_syscall_64+0xb8/0x160 [ 638.242213][T18270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.242213][T18270] RIP: 0033:0x45ca29 [ 638.242213][T18270] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 638.242213][T18270] RSP: 002b:00007f5d3daf6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 638.242213][T18270] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 638.242213][T18270] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 638.242213][T18270] RBP: 000000000078c040 R08: 008000000004ffe0 R09: 0000000000000000 [ 638.242213][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 638.242213][T18270] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f5d3daf76d4 [ 638.242213][T18270] [ 638.242213][T18270] Uninit was stored to memory at: [ 638.242213][T18270] kmsan_internal_chain_origin+0xad/0x130 [ 638.242213][T18270] __msan_chain_origin+0x50/0x90 [ 638.242213][T18270] ___bpf_prog_run+0x6c80/0x97a0 [ 638.242213][T18270] __bpf_prog_run32+0x101/0x170 [ 638.242213][T18270] sk_filter_trim_cap+0x42a/0xcc0 [ 638.242213][T18270] netlink_unicast+0x4b9/0x1100 [ 638.242213][T18270] netlink_ack+0x105c/0x11a0 [ 638.242213][T18270] netlink_rcv_skb+0x321/0x650 [ 638.242213][T18270] rtnetlink_rcv+0x50/0x60 [ 638.242213][T18270] netlink_unicast+0xf9e/0x1100 [ 638.242213][T18270] netlink_sendmsg+0x1246/0x14d0 [ 638.242213][T18270] kernel_sendmsg+0x433/0x440 [ 638.242213][T18270] sock_no_sendpage+0x235/0x300 [ 638.242213][T18270] sock_sendpage+0x1e1/0x2c0 [ 638.242213][T18270] pipe_to_sendpage+0x38c/0x4c0 [ 638.242213][T18270] __splice_from_pipe+0x539/0xed0 [ 638.242213][T18270] generic_splice_sendpage+0x1d5/0x2d0 [ 638.242213][T18270] do_splice+0x1eae/0x2ec0 [ 638.242213][T18270] __se_sys_splice+0x426/0x520 [ 638.242213][T18270] __x64_sys_splice+0x6e/0x90 [ 638.242213][T18270] do_syscall_64+0xb8/0x160 [ 638.242213][T18270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.242213][T18270] [ 638.242213][T18270] Uninit was stored to memory at: [ 638.242213][T18270] kmsan_internal_chain_origin+0xad/0x130 [ 638.242213][T18270] __msan_chain_origin+0x50/0x90 [ 638.242213][T18270] ___bpf_prog_run+0x6cbe/0x97a0 [ 638.242213][T18270] __bpf_prog_run32+0x101/0x170 [ 638.242213][T18270] sk_filter_trim_cap+0x42a/0xcc0 [ 638.242213][T18270] netlink_unicast+0x4b9/0x1100 [ 638.242213][T18270] netlink_ack+0x105c/0x11a0 [ 638.242213][T18270] netlink_rcv_skb+0x321/0x650 [ 638.242213][T18270] rtnetlink_rcv+0x50/0x60 [ 638.242213][T18270] netlink_unicast+0xf9e/0x1100 [ 638.242213][T18270] netlink_sendmsg+0x1246/0x14d0 [ 638.242213][T18270] kernel_sendmsg+0x433/0x440 [ 638.242213][T18270] sock_no_sendpage+0x235/0x300 [ 638.242213][T18270] sock_sendpage+0x1e1/0x2c0 [ 638.242213][T18270] pipe_to_sendpage+0x38c/0x4c0 [ 638.242213][T18270] __splice_from_pipe+0x539/0xed0 [ 638.242213][T18270] generic_splice_sendpage+0x1d5/0x2d0 [ 638.242213][T18270] do_splice+0x1eae/0x2ec0 [ 638.242213][T18270] __se_sys_splice+0x426/0x520 [ 638.242213][T18270] __x64_sys_splice+0x6e/0x90 [ 638.242213][T18270] do_syscall_64+0xb8/0x160 [ 638.242213][T18270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.242213][T18270] [ 638.242213][T18270] Uninit was stored to memory at: [ 638.242213][T18270] kmsan_internal_chain_origin+0xad/0x130 [ 638.242213][T18270] __msan_chain_origin+0x50/0x90 [ 638.242213][T18270] ___bpf_prog_run+0x6c64/0x97a0 [ 638.242213][T18270] __bpf_prog_run32+0x101/0x170 [ 638.242213][T18270] sk_filter_trim_cap+0x42a/0xcc0 [ 638.242213][T18270] netlink_unicast+0x4b9/0x1100 [ 638.242213][T18270] netlink_ack+0x105c/0x11a0 [ 638.242213][T18270] netlink_rcv_skb+0x321/0x650 [ 638.242213][T18270] rtnetlink_rcv+0x50/0x60 [ 638.242213][T18270] netlink_unicast+0xf9e/0x1100 [ 638.242213][T18270] netlink_sendmsg+0x1246/0x14d0 [ 638.242213][T18270] kernel_sendmsg+0x433/0x440 [ 638.242213][T18270] sock_no_sendpage+0x235/0x300 [ 638.242213][T18270] sock_sendpage+0x1e1/0x2c0 [ 638.242213][T18270] pipe_to_sendpage+0x38c/0x4c0 [ 638.242213][T18270] __splice_from_pipe+0x539/0xed0 [ 638.242213][T18270] generic_splice_sendpage+0x1d5/0x2d0 [ 638.242213][T18270] do_splice+0x1eae/0x2ec0 [ 638.242213][T18270] __se_sys_splice+0x426/0x520 [ 638.242213][T18270] __x64_sys_splice+0x6e/0x90 [ 638.242213][T18270] do_syscall_64+0xb8/0x160 [ 638.242213][T18270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.242213][T18270] [ 638.242213][T18270] Local variable ----regs@__bpf_prog_run32 created at: [ 638.242213][T18270] __bpf_prog_run32+0x87/0x170 [ 638.242213][T18270] __bpf_prog_run32+0x87/0x170 [ 638.242213][T18270] ===================================================== [ 638.242213][T18270] Disabling lock debugging due to kernel taint [ 638.242213][T18270] Kernel panic - not syncing: panic_on_warn set ... [ 638.242213][T18270] CPU: 1 PID: 18270 Comm: syz-executor.0 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 638.242213][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.242213][T18270] Call Trace: [ 638.242213][T18270] dump_stack+0x1c9/0x220 [ 638.242213][T18270] panic+0x3d5/0xc3e [ 638.242213][T18270] kmsan_report+0x1df/0x1e0 [ 638.242213][T18270] __msan_warning+0x58/0xa0 [ 638.242213][T18270] bpf_skb_load_helper_16+0xd9/0x2b0 [ 638.242213][T18270] ___bpf_prog_run+0x214d/0x97a0 [ 638.242213][T18270] ? __se_sys_splice+0x426/0x520 [ 638.242213][T18270] ? __x64_sys_splice+0x6e/0x90 [ 638.242213][T18270] ? bpf_skb_load_helper_8_no_cache+0x340/0x340 [ 638.242213][T18270] __bpf_prog_run32+0x101/0x170 [ 638.242213][T18270] ? kmsan_get_metadata+0x4f/0x180 [ 638.242213][T18270] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 638.242213][T18270] ? ___bpf_prog_run+0x97a0/0x97a0 [ 638.242213][T18270] sk_filter_trim_cap+0x42a/0xcc0 [ 638.242213][T18270] ? __netlink_lookup+0x8b9/0x980 [ 638.242213][T18270] ? kmsan_get_metadata+0x11d/0x180 [ 638.242213][T18270] ? kmsan_get_metadata+0x11d/0x180 [ 638.242213][T18270] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 638.242213][T18270] netlink_unicast+0x4b9/0x1100 [ 638.242213][T18270] netlink_ack+0x105c/0x11a0 [ 638.242213][T18270] netlink_rcv_skb+0x321/0x650 [ 638.242213][T18270] ? rtnetlink_bind+0x120/0x120 [ 638.242213][T18270] rtnetlink_rcv+0x50/0x60 [ 638.242213][T18270] netlink_unicast+0xf9e/0x1100 [ 638.242213][T18270] ? rtnetlink_net_exit+0x90/0x90 [ 638.242213][T18270] netlink_sendmsg+0x1246/0x14d0 [ 638.242213][T18270] ? netlink_getsockopt+0x1440/0x1440 [ 638.242213][T18270] kernel_sendmsg+0x433/0x440 [ 638.242213][T18270] sock_no_sendpage+0x235/0x300 [ 638.242213][T18270] ? sock_no_mmap+0x30/0x30 [ 638.242213][T18270] sock_sendpage+0x1e1/0x2c0 [ 638.242213][T18270] pipe_to_sendpage+0x38c/0x4c0 [ 638.242213][T18270] ? sock_fasync+0x250/0x250 [ 638.242213][T18270] __splice_from_pipe+0x539/0xed0 [ 638.242213][T18270] ? generic_splice_sendpage+0x2d0/0x2d0 [ 638.242213][T18270] generic_splice_sendpage+0x1d5/0x2d0 [ 638.242213][T18270] ? iter_file_splice_write+0x17b0/0x17b0 [ 638.242213][T18270] do_splice+0x1eae/0x2ec0 [ 638.242213][T18270] ? kmsan_get_metadata+0x4f/0x180 [ 638.242213][T18270] ? kmsan_internal_set_origin+0x75/0xb0 [ 638.242213][T18270] ? kmsan_get_metadata+0x11d/0x180 [ 638.242213][T18270] ? kmsan_set_origin_checked+0x95/0xf0 [ 638.242213][T18270] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 638.242213][T18270] __se_sys_splice+0x426/0x520 [ 638.242213][T18270] __x64_sys_splice+0x6e/0x90 [ 638.242213][T18270] do_syscall_64+0xb8/0x160 [ 638.242213][T18270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.242213][T18270] RIP: 0033:0x45ca29 [ 638.242213][T18270] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 638.242213][T18270] RSP: 002b:00007f5d3daf6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 638.242213][T18270] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 638.242213][T18270] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 638.242213][T18270] RBP: 000000000078c040 R08: 008000000004ffe0 R09: 0000000000000000 [ 638.242213][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 638.242213][T18270] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f5d3daf76d4 [ 638.242213][T18270] Kernel Offset: 0x400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 638.242213][T18270] Rebooting in 86400 seconds..