1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x200180) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x16b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') getdents64(r2, &(0x7f00000003c0)=""/4096, 0x1000) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 22:25:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x56a6, 0x11, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000007000/0x2000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) 22:25:05 executing program 1: r0 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a84308910000000400080008001e0000dc13382d0004009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 22:25:05 executing program 4: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f0000000080), 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1102.182747][T32745] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1102.185749][ C0] sd 0:0:1:0: [sg0] tag#1308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1102.201772][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB: Test Unit Ready [ 1102.207164][ C1] sd 0:0:1:0: [sg0] tag#1309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1102.208568][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.218946][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB: Test Unit Ready [ 1102.228739][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.235280][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.245028][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.254830][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.265195][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.274923][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.284606][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.294301][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.304017][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.313710][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.323407][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.333530][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.343193][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.343304][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.352997][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.362691][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.373338][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.383030][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.393776][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.403502][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.413256][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.422983][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1102.432701][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.459842][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.469920][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1102.486662][T32743] x86/PAT: syz-executor.5:32743 map pfn RAM range req write-combining for [mem 0x3007a000-0x3007afff], got write-back 22:25:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 22:25:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r3, 0x3, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0xc, 0x0, 0x0, r2, 0x0, 0x2000000}]) 22:25:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:25:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0000f8ff080009f6000000ddc3d13c00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2f0f3cb62caad2723985b8c9cb74802a7e01fa"}) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 22:25:05 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@private2, 0x0, 0x2, 0x2, 0x0, 0x3800, 0x1}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x200180) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x16b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') getdents64(r2, &(0x7f00000003c0)=""/4096, 0x1000) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 1102.926350][ T32] audit: type=1800 audit(1590531905.976:31): pid=32761 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15746 res=0 [ 1103.080041][ T32] audit: type=1800 audit(1590531906.136:32): pid=32761 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15748 res=0 22:25:06 executing program 3: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@private2, 0x0, 0x2, 0x2, 0x0, 0x3800, 0x1}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x200180) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x16b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') getdents64(r2, &(0x7f00000003c0)=""/4096, 0x1000) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 1103.226968][ C0] sd 0:0:1:0: [sg0] tag#1310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1103.237704][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB: Test Unit Ready [ 1103.244559][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.254454][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.264375][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.274299][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.284239][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.294122][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.304029][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.313957][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1103.323875][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.334227][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.344177][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.354093][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.364030][ C0] sd 0:0:1:0: [sg0] tag#1310 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1103.978829][ C0] sd 0:0:1:0: [sg0] tag#1312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1103.989567][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB: Test Unit Ready [ 1103.996277][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.006277][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.016255][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.026218][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.036193][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.046132][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.056083][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.066031][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 22:25:06 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@private2, 0x0, 0x2, 0x2, 0x0, 0x3800, 0x1}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x200180) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x16b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') getdents64(r2, &(0x7f00000003c0)=""/4096, 0x1000) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 22:25:06 executing program 3: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@private2, 0x0, 0x2, 0x2, 0x0, 0x3800, 0x1}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x200180) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa1c42d3e5d3eb5b3d246175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cfe8ca2996e518e3e690b89318c6646194a9d44e835a023ad7bbbe857a1b90bf6f5586adf0f696e8fd927531fc089f9e6e2c5a9a3f9f9c27caa4930b85ed14fd19e9beafdeefa406005e81e95077a96ec6f838f6c8cbe274fb9d9b61f2978729e56ca4b531289e8d25fbcde8cbda8ef28a815b4eb043a29af48490cef5"], 0x16b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') getdents64(r2, &(0x7f00000003c0)=""/4096, 0x1000) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 22:25:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 1104.075955][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.085955][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.096015][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.105938][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.115816][ C0] sd 0:0:1:0: [sg0] tag#1312 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1104.162567][ C1] sd 0:0:1:0: [sg0] tag#1311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1104.173238][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB: Test Unit Ready [ 1104.180055][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.190136][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.200078][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.210171][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.220119][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.230082][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.240303][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.250179][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.260053][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.269934][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.279815][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.289687][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.299564][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1104.307393][ C1] sd 0:0:1:0: [sg0] tag#1313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1104.318026][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB: Test Unit Ready [ 1104.324770][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.334697][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.344583][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.354451][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.364314][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.374198][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.384258][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.394132][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.404030][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.413920][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.423795][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.433682][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.444561][ C1] sd 0:0:1:0: [sg0] tag#1313 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 22:25:07 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) 22:25:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x13) dup3(r1, r2, 0x0) [ 1104.987557][ T468] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1104.996913][ T468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1105.024381][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1105.041842][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.050038][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:25:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x98, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x98}}, 0x0) 22:25:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000e530e9)=""/1, &(0x7f0000000080)=0x1) 22:25:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x40}}, 0x0) 22:25:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x98, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x98}}, 0x0) 22:25:08 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f00000001c0)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0x9205, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) 22:25:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x8004510a, &(0x7f0000000080)) 22:25:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000002c0)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) 22:25:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x98, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x98}}, 0x0) 22:25:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000001400)=""/122) 22:25:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f00000001c0)) 22:25:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{}, {}, {0x0, 0xf005, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff7}}) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 22:25:09 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20005) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x1, 0x70, 0x8a, 0xac, 0x4, 0x7a, 0x0, 0x1, 0x10000, 0xf5b249e8eee2ee20, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x10, 0x3, 0xffc, 0x4, 0x4, 0x6, 0x8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x17}, 0x10) r5 = dup3(r2, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x41a0ae8d, 0x0) dup2(r5, r4) 22:25:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x98, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x98}}, 0x0) 22:25:09 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x33) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r2 = getpgrp(0x0) kcmp(r2, r0, 0x0, r1, 0xffffffffffffffff) 22:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000001400)=""/122) 22:25:09 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7040, 0x0) [ 1106.317395][ C0] sd 0:0:1:0: [sg0] tag#1314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1106.328215][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB: Test Unit Ready [ 1106.334991][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.344826][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.354748][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.364677][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.374533][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.384383][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.394294][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.404231][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000001400)=""/122) 22:25:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x180000000) [ 1106.414197][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.424155][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.434062][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.443973][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.453900][ C0] sd 0:0:1:0: [sg0] tag#1314 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1106.629161][ C0] sd 0:0:1:0: [sg0] tag#1315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1106.639860][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB: Test Unit Ready [ 1106.646554][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.656667][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.666651][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.676655][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.686674][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.696687][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.706711][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.716723][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) [ 1106.726737][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.736719][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.746710][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.756658][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.766644][ C0] sd 0:0:1:0: [sg0] tag#1315 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:25:09 executing program 2: r0 = socket(0x18, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180), 0x8) 22:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000001400)=""/122) 22:25:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x10012, r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x21, 0x0, &(0x7f0000000040)) 22:25:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000180)=0x5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x10) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 22:25:10 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000080002, 0x88) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10002, 0x6) 22:25:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0xa0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)={@multicast1, @local, 0x0, 0x4000000000000066, [@empty, @broadcast, @loopback, @broadcast, @rand_addr]}, 0x10) 22:25:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x1}]}, 0x64}}, 0x0) 22:25:10 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), 0x4) getsockopt(r0, 0x114, 0x2712, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0x1849061a155ba8bb) 22:25:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r3, r2, 0x0, 0xedc0) 22:25:10 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)='R', 0x1}, {&(0x7f00000002c0)="6fd9f9845e726af3afedab6e97398ba90560db0b6e1dbe1bd0f66e8c700845f4d748da362a2fd3c109492bc153e2e29f5b9e9b98b0c7e9", 0x37}], 0x2, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 22:25:11 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x541240, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xfffffffffffffffc) sendfile(r4, r5, 0x0, 0xd811) 22:25:11 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), 0x4) getsockopt(r0, 0x114, 0x2712, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0x1849061a155ba8bb) 22:25:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r4, 0x7, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x6}]}, 0x34}, 0x1, 0xa00}, 0x0) [ 1109.092788][ T605] input: syz1 as /devices/virtual/input/input43 22:25:12 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={0x0, r0}, 0x10) 22:25:12 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x25dfdbff, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008003}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffdbc494) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 22:25:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x44}) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 22:25:13 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), 0x4) getsockopt(r0, 0x114, 0x2712, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0x1849061a155ba8bb) 22:25:13 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x541240, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) sendfile(r4, r5, 0x0, 0xd811) 22:25:13 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x1}}) 22:25:13 executing program 4: clone(0x209100, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), 0x4) 22:25:13 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x25dfdbff, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008003}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffdbc494) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 22:25:16 executing program 4: clone(0x209100, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:16 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x25dfdbff, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008003}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffdbc494) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 22:25:18 executing program 4: clone(0x209100, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:18 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) mq_timedsend(r2, &(0x7f00000003c0)="fabea912508664ae2781778e49912f30919b39a970dc30f6e70e4dc65f21f8da1979bfc44eaefdf2edaa", 0x2a, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000007000100000002", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00712dbc90cd0a2d17eb68bd2312f3c72a70a27b93eb0000001c0000000000b4fc4f7b5532d35c495fe1b2fd31d491bc5373892c8f1029fc8c3c581c5a539698be77989846472d61bd0135d7085970589cbab76af8511872624573381f21eb72b0e7f6b819a70bf8b43940430e3d4dc3cd0479a3108017f95efa2c8398205010dbf811135132a11031cfa9b4b8cde31bc6dcc786187893cc08c8d5a05ae24a378e3d7e85e8d9582e553d0c4dcbb4986a2a1f57f4453e703566cce8f58631800faeddd80ac030cb53f6e748c62f1f56aab802fd6110b00c33a327e642168f5bd016be", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r3, r4, 0x0, 0xa7fff) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x6) statx(r4, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000400)) 22:25:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x60}}, 0x0) [ 1115.387513][ C0] sd 0:0:1:0: [sg0] tag#1324 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1115.398177][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB: Test Unit Ready [ 1115.404975][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.415294][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.425206][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.435120][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.445227][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.455074][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.464922][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.474817][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:18 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1115.484689][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.494552][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.504412][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.514287][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1115.524129][ C0] sd 0:0:1:0: [sg0] tag#1324 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:18 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x25dfdbff, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008003}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) tkill(0x0, 0x1004000000013) ptrace(0x10, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffdbc494) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 22:25:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) splice(0xffffffffffffffff, &(0x7f0000000080)=0x7fffffff, r0, &(0x7f00000000c0)=0x7, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x800, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x3ab) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r2, &(0x7f00000003c0)="fabea912508664ae2781778e49912f30919b39a970dc30f6e70e4dc65f21f8da1979bfc44eaefdf2edaa", 0x2a, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000007000100000002", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00712dbc90cd0a2d17eb68bd2312f3c72a70a27b93eb0000001c0000000000b4fc4f7b5532d35c495fe1b2fd31d491bc5373892c8f1029fc8c3c581c5a539698be77989846472d61bd0135d7085970589cbab76af8511872624573381f21eb72b0e7f6b819a70bf8b43940430e3d4dc3cd0479a3108017f95efa2c8398205010dbf811135132a11031cfa9b4b8cde31bc6dcc786187893cc08c8d5a05ae24a378e3d7e85e8d9582e553d0c4dcbb4986a2a1f57f4453e703566cce8f58631800faeddd80ac030cb53f6e748c62f1f56aab802fd6110b00c33a327e642168f5bd016be", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r3, r4, 0x0, 0xa7fff) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x6) statx(r4, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000400)) 22:25:20 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:20 executing program 0: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) socket$kcm(0x2b, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x541240, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xd811) 22:25:20 executing program 5: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000001540)=0x9, 0x21, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x2000)=nil) 22:25:20 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) splice(0xffffffffffffffff, &(0x7f0000000080)=0x7fffffff, r0, &(0x7f00000000c0)=0x7, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x800, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x3ab) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r2, &(0x7f00000003c0)="fabea912508664ae2781778e49912f30919b39a970dc30f6e70e4dc65f21f8da1979bfc44eaefdf2edaa", 0x2a, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000007000100000002", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00712dbc90cd0a2d17eb68bd2312f3c72a70a27b93eb0000001c0000000000b4fc4f7b5532d35c495fe1b2fd31d491bc5373892c8f1029fc8c3c581c5a539698be77989846472d61bd0135d7085970589cbab76af8511872624573381f21eb72b0e7f6b819a70bf8b43940430e3d4dc3cd0479a3108017f95efa2c8398205010dbf811135132a11031cfa9b4b8cde31bc6dcc786187893cc08c8d5a05ae24a378e3d7e85e8d9582e553d0c4dcbb4986a2a1f57f4453e703566cce8f58631800faeddd80ac030cb53f6e748c62f1f56aab802fd6110b00c33a327e642168f5bd016be", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r3, r4, 0x0, 0xa7fff) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x6) statx(r4, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000400)) 22:25:22 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) r2 = socket$kcm(0x2b, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x541240, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd811) 22:25:22 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x28, r3, 0xe03, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x8}]}]}]}, 0x28}}, 0x0) [ 1119.166315][ C1] sd 0:0:1:0: [sg0] tag#1335 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1119.177045][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB: Test Unit Ready [ 1119.183869][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.193899][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.203822][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.213910][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.223807][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.233726][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.243804][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.253705][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.263600][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.273495][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.283432][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.293300][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.303186][ C1] sd 0:0:1:0: [sg0] tag#1335 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:22 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @empty, @val={@void}, {@arp}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:25:22 executing program 4: clone(0x209100, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x1000000010, 0x80002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:22 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd811) 22:25:22 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) mq_timedsend(r2, &(0x7f00000003c0)="fabea912508664ae2781778e49912f30919b39a970dc30f6e70e4dc65f21f8da1979bfc44eaefdf2edaa", 0x2a, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000007000100000002", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00712dbc90cd0a2d17eb68bd2312f3c72a70a27b93eb0000001c0000000000b4fc4f7b5532d35c495fe1b2fd31d491bc5373892c8f1029fc8c3c581c5a539698be77989846472d61bd0135d7085970589cbab76af8511872624573381f21eb72b0e7f6b819a70bf8b43940430e3d4dc3cd0479a3108017f95efa2c8398205010dbf811135132a11031cfa9b4b8cde31bc6dcc786187893cc08c8d5a05ae24a378e3d7e85e8d9582e553d0c4dcbb4986a2a1f57f4453e703566cce8f58631800faeddd80ac030cb53f6e748c62f1f56aab802fd6110b00c33a327e642168f5bd016be", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) r3 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r3, r4, 0x0, 0xa7fff) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x6) statx(r4, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000400)) 22:25:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x278, 0x280, 0x0, 0x0, 0x0, 0x348, 0x350, 0x350, 0x348, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x248, 0x278, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x49e) 22:25:22 executing program 4: clone(0x209100, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x1000000010, 0x80002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1119.966299][ C1] sd 0:0:1:0: [sg0] tag#1336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1119.977022][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB: Test Unit Ready [ 1119.983881][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1119.993764][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1120.003661][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1120.013582][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1120.023446][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1120.033659][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1120.043578][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1120.053452][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x278, 0x280, 0x0, 0x0, 0x0, 0x348, 0x350, 0x350, 0x348, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x248, 0x278, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x49e) 22:25:23 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:23 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @empty, @val={@void}, {@arp}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:25:23 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:23 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:24 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-<'], 0x24}}, 0x0) [ 1121.041309][ T908] IPVS: ftp: loaded support on port[0] = 21 22:25:24 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1}) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101}], {0x14, 0x11, 0x2}}, 0x3c}}, 0x0) 22:25:24 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-<'], 0x24}}, 0x0) 22:25:24 executing program 4: clone(0x209100, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:24 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-<'], 0x24}}, 0x0) 22:25:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @empty, @val={@void}, {@arp}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:25:24 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) [ 1121.690735][ T948] IPVS: ftp: loaded support on port[0] = 21 22:25:24 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:25 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:25 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1122.592657][ T996] input: syz1 as /devices/virtual/input/input45 [ 1122.635987][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1122.645495][ T1000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1122.701275][ T996] input: syz1 as /devices/virtual/input/input46 22:25:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @empty, @val={@void}, {@arp}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:25:26 executing program 4: clone(0x209100, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 22:25:26 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1123.273167][ T1030] input: syz1 as /devices/virtual/input/input47 22:25:26 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1123.823348][ T1048] input: syz1 as /devices/virtual/input/input48 [ 1123.840468][ T1047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1123.850179][ T1047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:25:27 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) 22:25:27 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1124.393379][ T1067] input: syz1 as /devices/virtual/input/input49 22:25:27 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:27 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:28 executing program 1: unshare(0x2000400) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xf0}) 22:25:28 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:25:28 executing program 1: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)="7181b0", 0x0}, 0x38) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x1a, r0) 22:25:28 executing program 4: r0 = socket(0x1000000010, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:28 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:25:29 executing program 4: r0 = socket(0x1000000010, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008f64d600100033000080", 0x14}], 0x1}, 0x0) 22:25:29 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) [ 1126.268714][ T1205] tipc: TX() has been purged, node left! 22:25:29 executing program 4: r0 = socket(0x1000000010, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008f64d600100033000080", 0x14}], 0x1}, 0x0) 22:25:29 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x18, 0x17, 0x1, 0x1c, 0xa, 0x1, 0x3, 0x137}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:25:29 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008f64d600100033000080", 0x14}], 0x1}, 0x0) 22:25:29 executing program 0: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) 22:25:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffc}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaab2aa01000012ffffff86dd603cb6c811c202"], 0x0) 22:25:31 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:31 executing program 0: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) 22:25:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008f64d600100033000080", 0x14}], 0x1}, 0x0) 22:25:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x18, 0x17, 0x1, 0x1c, 0xa, 0x1, 0x3, 0x137}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:25:31 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:32 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3b8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000011003586000900030000000007000000", @ANYRES32=r1], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:25:32 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:32 executing program 1: syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000000)='6e~\xe6\xe1d;\x8f\xfd', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xa4000960) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:25:33 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) 22:25:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:33 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 22:25:33 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd811) 22:25:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 22:25:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xb1, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d9246a8f6542614f2f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791484f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de075499"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:25:33 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) 22:25:33 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 22:25:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x9}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 22:25:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) socket$inet(0x2, 0x2, 0x0) io_setup(0x16, &(0x7f0000000200)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x7ffffffff000}]) 22:25:34 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xd811) 22:25:34 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 22:25:34 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:35 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xd811) 22:25:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) socket$inet(0x2, 0x2, 0x0) io_setup(0x16, &(0x7f0000000200)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x7ffffffff000}]) 22:25:35 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20002007}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 22:25:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) close(r2) socket$inet(0x2, 0x2, 0x0) io_setup(0x16, &(0x7f0000000200)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x7ffffffff000}]) 22:25:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r0, &(0x7f0000000280)="240000001a005f0214f9f4070009045435000000100000050000000008000d00fe000000", 0x24) 22:25:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x65) 22:25:36 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xd811) 22:25:36 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) close(r2) socket$inet(0x2, 0x2, 0x0) io_setup(0x16, &(0x7f0000000200)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x7ffffffff000}]) 22:25:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:36 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xd811) 22:25:36 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000007c92d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274614ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e35bd5522d45dc36c2442eac2d224609aba9e600"/180], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0x0, 0x0, r1, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000000d0a0300000000000000000000000001098499617c5ddd00010073797a30000000000900010473797a303b100000d23c0c5eed2e260e9e074a6476e8ab983800be5eb719b9948d7dc9fc7764078700a0e2bb44a1e00aaa6dbfa6380e698ef8f15e1b024d6443da046f9de53f7cdb7c0c83d028989be14d7a1104ba8206d99c0ba8ac3431a54e054b"], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004051}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000240)={0x0, @time={0x5, 0x2}, 0x4, {0x0, 0x20}, 0x5, 0x1, 0x8}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:25:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r0, &(0x7f0000000280)="240000001a005f0214f9f4070009045435000000100000050000000008000d00fe000000", 0x24) 22:25:36 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) [ 1133.683342][ C1] sd 0:0:1:0: [sg0] tag#1284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1133.694542][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB: Test Unit Ready [ 1133.701387][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.711274][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.721528][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1133.731516][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.741488][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.751420][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.761288][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.771172][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.781491][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.791568][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.801562][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1133.805459][ T1367] IPVS: ftp: loaded support on port[0] = 21 [ 1133.811591][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:36 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xd811) [ 1133.827417][ C1] sd 0:0:1:0: [sg0] tag#1284 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1133.853288][ T1366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:25:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r0, &(0x7f0000000280)="240000001a005f0214f9f4070009045435000000100000050000000008000d00fe000000", 0x24) 22:25:37 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) 22:25:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r0, &(0x7f0000000280)="240000001a005f0214f9f4070009045435000000100000050000000008000d00fe000000", 0x24) [ 1134.604895][ C1] sd 0:0:1:0: [sg0] tag#1285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1134.615570][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB: Test Unit Ready [ 1134.622391][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.632287][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.642203][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.652185][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.662089][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.671970][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.681957][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.691852][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.701723][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.711700][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.721582][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.731464][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.741333][ C1] sd 0:0:1:0: [sg0] tag#1285 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1134.835992][ T1409] dccp_xmit_packet: Payload too large (65475) for featneg. 22:25:37 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 22:25:37 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1135.743045][ T1366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:25:39 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 22:25:39 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) 22:25:39 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) 22:25:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1136.550119][ T1449] dccp_xmit_packet: Payload too large (65475) for featneg. [ 1136.578701][T15161] tipc: TX() has been purged, node left! 22:25:39 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 22:25:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) 22:25:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8901}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) [ 1137.300637][ T1463] dccp_xmit_packet: Payload too large (65475) for featneg. 22:25:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) 22:25:40 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a010000000000040000000000000f0900010073797a300000000070000000120a0100001000000000000000800000040004800900020073797a30000000000900010073797a300000000008000340000000000900020090850004925e54be04000480040004800800034000000002140004800c0001"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 22:25:41 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) 22:25:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:41 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010100}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x100c) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r6 = dup(r5) sendfile(r5, r6, 0x0, 0x80006) [ 1138.365727][ C0] sd 0:0:1:0: [sg0] tag#1286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1138.376379][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB: Test Unit Ready [ 1138.383220][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.393074][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.403114][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.413174][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.423209][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.433258][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.443688][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.452643][ T1496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1138.453539][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.462853][ T1496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1138.472587][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.472690][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.501842][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.511698][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1138.521601][ C0] sd 0:0:1:0: [sg0] tag#1286 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:41 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) 22:25:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x82, 0x4, 0xf}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) [ 1138.881103][ T1502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1138.890986][ T1502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:25:42 executing program 0: unshare(0x400) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) [ 1139.263968][ C0] sd 0:0:1:0: [sg0] tag#1287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1139.274614][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB: Test Unit Ready [ 1139.281431][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.291762][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.302367][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.312620][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.322795][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.332781][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.342702][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.352618][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.362537][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.373029][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.383240][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.393371][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1139.403241][ C0] sd 0:0:1:0: [sg0] tag#1287 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a010000000000040000000000000f0900010073797a300000000070000000120a0100001000000000000000800000040004800900020073797a30000000000900010073797a300000000008000340000000000900020090850004925e54be04000480040004800800034000000002140004800c0001"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 22:25:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xf}}]}}]}, 0x3c}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:25:42 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1139.879610][ T1523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1139.889156][ T1523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:25:43 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x38}}, 0x0) 22:25:43 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x38}}, 0x0) [ 1140.588176][ C1] sd 0:0:1:0: [sg0] tag#1288 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1140.598059][ C1] sd 0:0:1:0: [sg0] tag#1288 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1140.607917][ C1] sd 0:0:1:0: [sg0] tag#1288 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1140.617806][ C1] sd 0:0:1:0: [sg0] tag#1288 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1140.627736][ C1] sd 0:0:1:0: [sg0] tag#1288 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1140.697246][ T1556] skbuff: bad partial csum: csum=3808/0 headroom=64 headlen=3712 22:25:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x4d, 0x0, 0x0) [ 1140.923069][ T1565] __nla_validate_parse: 3 callbacks suppressed [ 1140.923099][ T1565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:25:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0500002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 22:25:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a010000000000040000000000000f0900010073797a300000000070000000120a0100001000000000000000800000040004800900020073797a30000000000900010073797a300000000008000340000000000900020090850004925e54be04000480040004800800034000000002140004800c0001"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 22:25:44 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x38}}, 0x0) 22:25:44 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1141.378945][T15161] tipc: TX() has been purged, node left! [ 1141.386635][ T1577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1141.396362][ T1577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1141.569070][ T1584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:25:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0500002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 22:25:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x38}}, 0x0) 22:25:45 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010100}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x100c) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r6 = dup(r5) sendfile(r5, r6, 0x0, 0x80006) 22:25:45 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:45 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0500002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 22:25:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000001f8ffffffffffff00002000"}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001fb2b9409ac00ac9a37b802078020011000504000006740009", 0xffffffffffffffa4, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 1142.278379][ T1600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1142.385331][ C0] sd 0:0:1:0: [sg0] tag#1289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1142.396035][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB: Test Unit Ready [ 1142.402959][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.412931][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.423247][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.433254][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.443496][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.453886][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.463900][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.473912][ C0] sd 0:0:1:0: [sg0] tag#1289 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:45 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) [ 1142.617622][ T1618] skbuff: bad partial csum: csum=3808/0 headroom=64 headlen=3712 22:25:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0500002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 22:25:46 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(0xffffffffffffffff, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:46 executing program 1: mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 1143.447612][ C1] sd 0:0:1:0: [sg0] tag#1290 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1143.457514][ C1] sd 0:0:1:0: [sg0] tag#1290 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1143.467458][ C1] sd 0:0:1:0: [sg0] tag#1290 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1143.477485][ C1] sd 0:0:1:0: [sg0] tag#1290 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1143.487403][ C1] sd 0:0:1:0: [sg0] tag#1290 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:46 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(0xffffffffffffffff, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:47 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, @ANYBLOB="6d000000dbed278854af2ca84e8901c9e49602b2695255eeb0d34624dfd27ae2495c856be8bc48d15fd9300042e7ce5b64af4401ea546ebe095da291b8e999b9e40c658741ed93703f92e39c990efd16cf0a189cf4b3b2f52f7218ac603ed3e0b5d4e804c2d499a0daf1b24eda928bcab915c8fccaa8aa143c2d3423c84e09f91f92c00d85eee5d1673cecb93e219e062f3ac2acac33ffe35d89397fa94587c5635d916b6f91bdd03813261c3d88b92d77cdee2d5aa3227746868bcdf3950a15b24113038aecfbdaef6360fce342fe0e801a7d8f557912e5de77f2b67ca48a815ea643e6b7145e1a"], &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) keyctl$get_security(0x11, 0x0, &(0x7f0000000500)=""/75, 0x4b) write$binfmt_misc(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="5300000044a6beabc81e1520000000000000001000fff6129edb9820000000000000d403f7ff633b27e526560000000059d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f02cc3c1a6ed7360627ec60cb274e08da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc71d61c2b3c65f2f80a61ea6e457ebc93982e20e03b86d4e999bbb53a930ee0ce30e00600cff8ca1496e518e3e6fcfffffffffffffffeb82ee2469fb31bdbb2768d25f196ab6f2d1b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab01f70d85463c57c5bb1f1084e683b591fc2ca01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08735cf643db6db0f9a9eed23ede6634bf57fbe0080d1588bb30abcbfecb4e10d4097a01000000000000000beb233e0e40d89147bc67990d3b754ca3b886b8a4c080f2ea4b1fcd8dd58b946c469fb7001340d06a04c9b039bec54854693563080e683a28fc32d6aafe2847078f1d32fdceff9ea5d428ee5b65129f7e6a9f739d8a20c7ed1a0f192bac54dace78644b5949ff010000000000008938ed0393ced6d6f81f5e3f2e551aeb9cdfe38f7e3dab378ddaffaa5670d78a345fe99e59de26086a3b29d047a032d35ddf8b90283a83cab92e06000000eb327c428c3222c3bacb0a2c2651d47fa7e72d54e7867558e7d80fdf6668c5584edf74c374296322a867da5b6819a63269bbecc42ffd5954890c2c4550cb11ec7e0e17c89c00000000000000002a7869e7ed24f05d475ed924c9f4e26f947f8639c5c8ed64e447014882b7bca7ab8ca9fdcba1da30765f5c55164caf015c334a4af852c28a6ecd78c20eae30c207b32c15dc3effbd547480b1510099de4e052a18496cdfc76fd205f201f2d964f5f9fe18d46cb789d7c52f5c0de5311749ef56244f7c3f11235c9df18f62980babe1583e4b887e71fa7a3780d99f34eae615995609ef08dc05e38f63c693ac0cc6ddd1336d55c1576d5e6700e62d696bf817af863936a650f9f3c8732793bdb2802c1461babf6720b6c551d2ace1929b6880d6e095da065d01b59bc71bb149fd7555cfe486aaa96a8040c5a9c4cae2c6edfd7013488c2056fb83119f81828f4ece4dafb2404c4aadca5c7c3b8bda7852f0a83156ef22705082cff411c6eb602b8228ba2f022183b693db6dfbdbef2e5afc01273edf88047c1f5162e4c281b33b8f57750595b8e50dcf44653110485eabc8b4510469da226539c645a7dcd73b0657ab58002ca2e78c672f80266668cc658bda1996ca1b6ecaeec2ca16e846172f5536134b447ccc685fde720afd531ca19778d5d247c17a0156782e78086f00000000000000000000416d660300dcb9f36f9c4c4d2729548d1c87f50c9120703a325d80d709e8290ef40421a3191aa70118a6f8351f8050f6f0bdc8fadb48cbb85204bc360186b24b6129a7069fdc2bc157aaac28454eba3b901346900e8b70f47a16896ad3cfc898af4ac7850854d8852965e91c605abc5c8f47aaae50de5f395857128cfff055495f1d328e81f05dac7ac9acecbfffc13ed5c9225b02caee90013d38aa02ae922a218712ad8604bdc44c404f5ab2a7de54cee4d732b3fc9f150d85b97d42284d39a20eec93703d33f1be1aa49a9add5183095014db702f97164862e3c4fdf8662f430159201ea111123d104a64b9af163f80a9710000"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x6, 0x45, 0x5, 0x1, 0x0, 0x7, 0x80000001, 0x401, 0x1, 0x7d, 0x1, 0x101, 0x8b0, 0x0, 0x4, 0x1ff, 0x0, 0x6, 0x8, 0x7fffffff, 0x8, 0x400, 0xffff, 0x80, 0x6, 0x0, 0x9, 0x40, 0x3, 0x101, 0x619, 0x2]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1cac83, 0x0) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000580)=0x9, 0x4) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x38000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x5}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 22:25:47 executing program 1: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'sit0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 22:25:47 executing program 0: unshare(0x2040400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x8004745a, &(0x7f00000003c0)) [ 1144.685281][ C0] sd 0:0:1:0: [sg0] tag#1291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1144.696445][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB: Test Unit Ready [ 1144.703261][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.713199][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.723147][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.733149][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.743252][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.753208][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.763137][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.773073][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.783021][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.792968][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.802886][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.812802][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1144.822713][ C0] sd 0:0:1:0: [sg0] tag#1291 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1144.861930][ T1675] xt_CT: You must specify a L4 protocol and not use inversions on it 22:25:48 executing program 1: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'sit0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 22:25:48 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x34, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34}}, 0x0) [ 1145.119531][ T1682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1145.191054][ T1676] IPVS: ftp: loaded support on port[0] = 21 [ 1145.249939][ T1693] tipc: MTU too low for tipc bearer [ 1145.295397][ T1694] tipc: MTU too low for tipc bearer 22:25:48 executing program 4: socket(0x1000000010, 0x80002, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:48 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000200)}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x2000000000000072, &(0x7f0000000080)) 22:25:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x8, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) [ 1145.833577][ C0] sd 0:0:1:0: [sg0] tag#1292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1145.844913][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB: Test Unit Ready [ 1145.851701][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.861703][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.871825][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.881738][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.891837][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.901761][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.911681][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.921734][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.931746][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.941648][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.941763][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.961187][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.964017][ T1716] IPVS: ftp: loaded support on port[0] = 21 22:25:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000a00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "380da9", 0x44, 0x2f, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}, 0x0) 22:25:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1145.971120][ C0] sd 0:0:1:0: [sg0] tag#1292 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:49 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, @ANYBLOB="6d000000dbed278854af2ca84e8901c9e49602b2695255eeb0d34624dfd27ae2495c856be8bc48d15fd9300042e7ce5b64af4401ea546ebe095da291b8e999b9e40c658741ed93703f92e39c990efd16cf0a189cf4b3b2f52f7218ac603ed3e0b5d4e804c2d499a0daf1b24eda928bcab915c8fccaa8aa143c2d3423c84e09f91f92c00d85eee5d1673cecb93e219e062f3ac2acac33ffe35d89397fa94587c5635d916b6f91bdd03813261c3d88b92d77cdee2d5aa3227746868bcdf3950a15b24113038aecfbdaef6360fce342fe0e801a7d8f557912e5de77f2b67ca48a815ea643e6b7145e1a"], &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) keyctl$get_security(0x11, 0x0, &(0x7f0000000500)=""/75, 0x4b) write$binfmt_misc(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="5300000044a6beabc81e1520000000000000001000fff6129edb9820000000000000d403f7ff633b27e526560000000059d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f02cc3c1a6ed7360627ec60cb274e08da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc71d61c2b3c65f2f80a61ea6e457ebc93982e20e03b86d4e999bbb53a930ee0ce30e00600cff8ca1496e518e3e6fcfffffffffffffffeb82ee2469fb31bdbb2768d25f196ab6f2d1b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab01f70d85463c57c5bb1f1084e683b591fc2ca01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08735cf643db6db0f9a9eed23ede6634bf57fbe0080d1588bb30abcbfecb4e10d4097a01000000000000000beb233e0e40d89147bc67990d3b754ca3b886b8a4c080f2ea4b1fcd8dd58b946c469fb7001340d06a04c9b039bec54854693563080e683a28fc32d6aafe2847078f1d32fdceff9ea5d428ee5b65129f7e6a9f739d8a20c7ed1a0f192bac54dace78644b5949ff010000000000008938ed0393ced6d6f81f5e3f2e551aeb9cdfe38f7e3dab378ddaffaa5670d78a345fe99e59de26086a3b29d047a032d35ddf8b90283a83cab92e06000000eb327c428c3222c3bacb0a2c2651d47fa7e72d54e7867558e7d80fdf6668c5584edf74c374296322a867da5b6819a63269bbecc42ffd5954890c2c4550cb11ec7e0e17c89c00000000000000002a7869e7ed24f05d475ed924c9f4e26f947f8639c5c8ed64e447014882b7bca7ab8ca9fdcba1da30765f5c55164caf015c334a4af852c28a6ecd78c20eae30c207b32c15dc3effbd547480b1510099de4e052a18496cdfc76fd205f201f2d964f5f9fe18d46cb789d7c52f5c0de5311749ef56244f7c3f11235c9df18f62980babe1583e4b887e71fa7a3780d99f34eae615995609ef08dc05e38f63c693ac0cc6ddd1336d55c1576d5e6700e62d696bf817af863936a650f9f3c8732793bdb2802c1461babf6720b6c551d2ace1929b6880d6e095da065d01b59bc71bb149fd7555cfe486aaa96a8040c5a9c4cae2c6edfd7013488c2056fb83119f81828f4ece4dafb2404c4aadca5c7c3b8bda7852f0a83156ef22705082cff411c6eb602b8228ba2f022183b693db6dfbdbef2e5afc01273edf88047c1f5162e4c281b33b8f57750595b8e50dcf44653110485eabc8b4510469da226539c645a7dcd73b0657ab58002ca2e78c672f80266668cc658bda1996ca1b6ecaeec2ca16e846172f5536134b447ccc685fde720afd531ca19778d5d247c17a0156782e78086f00000000000000000000416d660300dcb9f36f9c4c4d2729548d1c87f50c9120703a325d80d709e8290ef40421a3191aa70118a6f8351f8050f6f0bdc8fadb48cbb85204bc360186b24b6129a7069fdc2bc157aaac28454eba3b901346900e8b70f47a16896ad3cfc898af4ac7850854d8852965e91c605abc5c8f47aaae50de5f395857128cfff055495f1d328e81f05dac7ac9acecbfffc13ed5c9225b02caee90013d38aa02ae922a218712ad8604bdc44c404f5ab2a7de54cee4d732b3fc9f150d85b97d42284d39a20eec93703d33f1be1aa49a9add5183095014db702f97164862e3c4fdf8662f430159201ea111123d104a64b9af163f80a9710000"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x6, 0x45, 0x5, 0x1, 0x0, 0x7, 0x80000001, 0x401, 0x1, 0x7d, 0x1, 0x101, 0x8b0, 0x0, 0x4, 0x1ff, 0x0, 0x6, 0x8, 0x7fffffff, 0x8, 0x400, 0xffff, 0x80, 0x6, 0x0, 0x9, 0x40, 0x3, 0x101, 0x619, 0x2]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1cac83, 0x0) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000580)=0x9, 0x4) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x38000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x5}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 22:25:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000bc0)="13", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000c00)='j', 0x1}], 0x1}}], 0x2, 0x0) dup3(r0, r1, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4092, 0xffc}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/58, 0x3a}], 0x1}, 0x8001}], 0x2, 0x100, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) 22:25:49 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r2 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-<'], 0x24}}, 0x0) 22:25:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000002f40)={0x2, 0x0, 0x0, {0xfff, 0xf307}}) 22:25:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @link_local}, 0x10) 22:25:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1146.609061][ T1769] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1146.913203][ C1] sd 0:0:1:0: [sg0] tag#1301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1146.923951][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB: Test Unit Ready [ 1146.930742][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1146.940607][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1146.950517][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1146.960370][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1146.970313][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1146.981287][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1146.991196][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1147.001103][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:50 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r2 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-<'], 0x24}}, 0x0) [ 1147.010994][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1147.020912][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1147.030801][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1147.040735][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1147.050643][ C1] sd 0:0:1:0: [sg0] tag#1301 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1147.086950][ T1769] 8021q: adding VLAN 0 to HW filter on device bond5 22:25:50 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) 22:25:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) [ 1147.495123][ T1810] IPVS: ftp: loaded support on port[0] = 21 [ 1147.500488][ T1769] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1147.549015][ T1769] 8021q: adding VLAN 0 to HW filter on device bond6 22:25:50 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r2 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-<'], 0x24}}, 0x0) 22:25:50 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 1147.739109][T15161] tipc: TX() has been purged, node left! 22:25:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @link_local}, 0x10) 22:25:51 executing program 5: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x800, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="6d000000dbed278854af2ca84e8901c9e49602b2695255eeb0d34624dfd27ae2495c856be8bc48d15fd9300042e7ce5b64af4401ea546ebe095da291b8e999b9e40c658741ed93703f92e39c990efd16cf0a189cf4b3b2f52f7218ac603ed3e0b5d4e804c2d499a0daf1b24eda928bcab915c8fccaa8aa143c2d3423c84e09f91f92c00d85eee5d1673cecb93e219e062f3ac2acac33ffe35d89397fa94587c5635d916b6f91bdd03813261c3d88b92d77cdee2d5aa3227746868bcdf3950a15b24113038aecfbdaef6360fce342fe0e801a7d8f557912e5de77f2b67ca48a815ea643e6b7145e1a"], &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) keyctl$get_security(0x11, 0x0, &(0x7f0000000500)=""/75, 0x4b) write$binfmt_misc(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="5300000044a6beabc81e1520000000000000001000fff6129edb9820000000000000d403f7ff633b27e526560000000059d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f02cc3c1a6ed7360627ec60cb274e08da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc71d61c2b3c65f2f80a61ea6e457ebc93982e20e03b86d4e999bbb53a930ee0ce30e00600cff8ca1496e518e3e6fcfffffffffffffffeb82ee2469fb31bdbb2768d25f196ab6f2d1b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab01f70d85463c57c5bb1f1084e683b591fc2ca01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08735cf643db6db0f9a9eed23ede6634bf57fbe0080d1588bb30abcbfecb4e10d4097a01000000000000000beb233e0e40d89147bc67990d3b754ca3b886b8a4c080f2ea4b1fcd8dd58b946c469fb7001340d06a04c9b039bec54854693563080e683a28fc32d6aafe2847078f1d32fdceff9ea5d428ee5b65129f7e6a9f739d8a20c7ed1a0f192bac54dace78644b5949ff010000000000008938ed0393ced6d6f81f5e3f2e551aeb9cdfe38f7e3dab378ddaffaa5670d78a345fe99e59de26086a3b29d047a032d35ddf8b90283a83cab92e06000000eb327c428c3222c3bacb0a2c2651d47fa7e72d54e7867558e7d80fdf6668c5584edf74c374296322a867da5b6819a63269bbecc42ffd5954890c2c4550cb11ec7e0e17c89c00000000000000002a7869e7ed24f05d475ed924c9f4e26f947f8639c5c8ed64e447014882b7bca7ab8ca9fdcba1da30765f5c55164caf015c334a4af852c28a6ecd78c20eae30c207b32c15dc3effbd547480b1510099de4e052a18496cdfc76fd205f201f2d964f5f9fe18d46cb789d7c52f5c0de5311749ef56244f7c3f11235c9df18f62980babe1583e4b887e71fa7a3780d99f34eae615995609ef08dc05e38f63c693ac0cc6ddd1336d55c1576d5e6700e62d696bf817af863936a650f9f3c8732793bdb2802c1461babf6720b6c551d2ace1929b6880d6e095da065d01b59bc71bb149fd7555cfe486aaa96a8040c5a9c4cae2c6edfd7013488c2056fb83119f81828f4ece4dafb2404c4aadca5c7c3b8bda7852f0a83156ef22705082cff411c6eb602b8228ba2f022183b693db6dfbdbef2e5afc01273edf88047c1f5162e4c281b33b8f57750595b8e50dcf44653110485eabc8b4510469da226539c645a7dcd73b0657ab58002ca2e78c672f80266668cc658bda1996ca1b6ecaeec2ca16e846172f5536134b447ccc685fde720afd531ca19778d5d247c17a0156782e78086f00000000000000000000416d660300dcb9f36f9c4c4d2729548d1c87f50c9120703a325d80d709e8290ef40421a3191aa70118a6f8351f8050f6f0bdc8fadb48cbb85204bc360186b24b6129a7069fdc2bc157aaac28454eba3b901346900e8b70f47a16896ad3cfc898af4ac7850854d8852965e91c605abc5c8f47aaae50de5f395857128cfff055495f1d328e81f05dac7ac9acecbfffc13ed5c9225b02caee90013d38aa02ae922a218712ad8604bdc44c404f5ab2a7de54cee4d732b3fc9f150d85b97d42284d39a20eec93703d33f1be1aa49a9add5183095014db702f97164862e3c4fdf8662f430159201ea111123d104a64b9af163f80a9710000"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x6, 0x45, 0x5, 0x1, 0x0, 0x7, 0x80000001, 0x401, 0x1, 0x7d, 0x1, 0x101, 0x8b0, 0x0, 0x4, 0x1ff, 0x0, 0x6, 0x8, 0x7fffffff, 0x8, 0x400, 0xffff, 0x80, 0x6, 0x0, 0x9, 0x40, 0x3, 0x101, 0x619, 0x2]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1cac83, 0x0) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000580)=0x9, 0x4) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x38000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x5}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 1148.229618][ T1893] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1148.325197][ T1893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1148.448828][ C0] sd 0:0:1:0: [sg0] tag#1302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1148.459671][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB: Test Unit Ready [ 1148.466306][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.476213][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.486313][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.496246][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.506309][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.516247][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.526153][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.536015][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.545896][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.555758][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.565636][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.575518][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1148.585400][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1148.934109][ T1932] IPVS: ftp: loaded support on port[0] = 21 22:25:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="2e00000010008108040a80ecdb4cb92e0a480e000d000000e8bd6efb250309000e00010000000000000010001201", 0x2e}], 0x1}, 0x0) 22:25:52 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 22:25:52 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @link_local}, 0x10) 22:25:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = userfaultfd(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 22:25:52 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, @ANYBLOB="6d000000dbed278854af2ca84e8901c9e49602b2695255eeb0d34624dfd27ae2495c856be8bc48d15fd9300042e7ce5b64af4401ea546ebe095da291b8e999b9e40c658741ed93703f92e39c990efd16cf0a189cf4b3b2f52f7218ac603ed3e0b5d4e804c2d499a0daf1b24eda928bcab915c8fccaa8aa143c2d3423c84e09f91f92c00d85eee5d1673cecb93e219e062f3ac2acac33ffe35d89397fa94587c5635d916b6f91bdd03813261c3d88b92d77cdee2d5aa3227746868bcdf3950a15b24113038aecfbdaef6360fce342fe0e801a7d8f557912e5de77f2b67ca48a815ea643e6b7145e1a"], &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) keyctl$get_security(0x11, 0x0, &(0x7f0000000500)=""/75, 0x4b) write$binfmt_misc(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x6, 0x45, 0x5, 0x1, 0x0, 0x7, 0x80000001, 0x401, 0x1, 0x7d, 0x1, 0x101, 0x8b0, 0x0, 0x4, 0x1ff, 0x0, 0x6, 0x8, 0x7fffffff, 0x8, 0x400, 0xffff, 0x80, 0x6, 0x0, 0x9, 0x40, 0x3, 0x101, 0x619, 0x2]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1cac83, 0x0) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000580)=0x9, 0x4) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x38000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x5}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 22:25:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) 22:25:53 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 22:25:53 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0xfffffdef) 22:25:53 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @link_local}, 0x10) [ 1150.488146][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1150.498024][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1150.508000][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1150.517911][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1150.527847][ C1] sd 0:0:1:0: [sg0] tag#1309 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1150.684489][ T2036] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1150.861089][ T2036] 8021q: adding VLAN 0 to HW filter on device bond9 22:25:53 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 1150.927659][ T2032] IPVS: ftp: loaded support on port[0] = 21 22:25:54 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 22:25:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x80984120, &(0x7f0000000500)) 22:25:54 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb17b55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0x0, 0x7}, [@TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x54}}, 0x0) 22:25:55 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x492902, 0x0) 22:25:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:55 executing program 2: unshare(0x20400) r0 = socket$packet(0x11, 0x3, 0x300) fcntl$setsig(r0, 0xa, 0x41) 22:25:55 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:55 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8d13840a5d40000000020010002000fe020000000008000400", @ANYRES32], 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:25:56 executing program 2: unshare(0x20400) r0 = socket$packet(0x11, 0x3, 0x300) fcntl$setsig(r0, 0xa, 0x41) 22:25:56 executing program 0: clock_getres(0x60aa120b9c13429f, 0x0) 22:25:56 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101205) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x162) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x2, 0x70bd2b, 0x25dfdbff, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8002}, 0x8000) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0xc55}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='0', 0x1}], 0x276) r3 = signalfd4(r1, &(0x7f0000000380)={[0x80000001]}, 0x8, 0x800) write$binfmt_misc(r3, &(0x7f0000000580)={'syz1', "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"}, 0x1004) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) 22:25:56 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:56 executing program 2: unshare(0x20400) r0 = socket$packet(0x11, 0x3, 0x300) fcntl$setsig(r0, 0xa, 0x41) [ 1153.361605][ C0] sd 0:0:1:0: [sg0] tag#1328 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1153.372592][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB: Test Unit Ready [ 1153.379554][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.390623][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.400465][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.410439][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.420419][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.430283][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.440141][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.450008][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0x0, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000012000102000000000a77038f8086"], 0x20}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1153.459886][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.469769][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.479637][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.489626][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.499640][ C0] sd 0:0:1:0: [sg0] tag#1328 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$isdn(0x22, 0x2, 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) dup2(r4, r2) [ 1153.645880][ C1] sd 0:0:1:0: [sg0] tag#1329 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1153.656615][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB: Test Unit Ready [ 1153.663422][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.668040][ T2168] delete_channel: no stack [ 1153.673360][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.687665][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.697629][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.706751][ T2169] delete_channel: no stack [ 1153.707547][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.721851][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.731801][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.741784][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.751904][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.762145][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.773077][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1153.783535][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:25:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x8000000000000000) [ 1153.793578][ C1] sd 0:0:1:0: [sg0] tag#1329 CDB[c0]: 00 00 00 00 00 00 00 00 22:25:57 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000003c0)=""/246) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:25:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000016001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x784, 0x2566, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 22:25:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0xc8, 0x0, 0xc8, 0x0, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x0, 0xae352c0f8c1b715f}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 22:25:57 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xd0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00091a0008000100706965000c0002000800070000000000"], 0x38}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x41f809b1a7d7b00, 0x0) 22:25:57 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000003c0)=""/246) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1154.619286][T15161] tipc: TX() has been purged, node left! 22:25:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="66b82f010f00d88fc820a2141d00600000dc66ba2100b804000000ef3e660f3882a1c5000000c4227d0fb507000000660f38801a0f01d12e66400808c4215972e500c7442400d2000000c7442402dc000000ff2c24", 0x55}], 0x1, 0x70, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:25:57 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 22:25:58 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000003c0)=""/246) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:25:58 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x10}}}, 0x24}}, 0x0) 22:25:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000800), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000800), 0x4, 0x0) 22:25:59 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000003c0)=""/246) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:25:59 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0}, &(0x7f0000cab000)=0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x3, r2}}) 22:25:59 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 22:25:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0xf00000000000000}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0) 22:25:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="d5", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) dup3(r1, r0, 0x0) 22:25:59 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 22:26:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f27682c1d8131bd409000000060008", 0x10) 22:26:00 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 22:26:00 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0}) setpgid(0x0, r1) 22:26:01 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) 22:26:01 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1}}], 0x4000000000001ea, 0x0) 22:26:02 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000603000500000000000200423b000001000012b478407f8604"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000180), 0x400000000000003, 0x0) 22:26:02 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) 22:26:02 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) 22:26:02 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 22:26:02 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000603000500000000000200423b000001000012b478407f8604"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000180), 0x400000000000003, 0x0) 22:26:02 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 22:26:03 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2a, 0x0, 0x0) 22:26:03 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 22:26:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000603000500000000000200423b000001000012b478407f8604"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000180), 0x400000000000003, 0x0) 22:26:03 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 22:26:03 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 22:26:03 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000e, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x5) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @empty=0x1700000000000000}, 0x10) 22:26:03 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e}]}}}]}, 0x40}}, 0x0) 22:26:04 executing program 0: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1, 0x7}}, 0x24) 22:26:04 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) [ 1161.240083][ T2479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:26:04 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r6, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}]) dup3(r4, r5, 0x0) fcntl$setown(r1, 0x8, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) tkill(r0, 0x15) 22:26:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000780)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80010028, 0x0, 0x0, 0x21}) 22:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000000000000, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000086dd73797a6b616c6c65723000000000000074756e6c3000000000000000000000007369743000000000000000000000000069666230000000000000000000010000000000000000000000000000ffffffffffff00000000000000002801000060010000b0010000697036000000000900000000000000000000000000000000000000000000000050000000000000000800000000000000000000000000000000000000000000000000ffffac1414aa0000000000000000000000000000000000000000000000000000000000000000003a4000ffe5000000000000000000006d61726b5f6d00000000000000000000000000000000000000000000000008000000000000000000000000001f00000000000000000000000000000000000000646e6174000000000000000000000000000000001f00000000000000000000001000000000000000ffffffffffff000000000000000000004c4544000000000000000000000000000000000000000000000000000000000028e400000000000073797a3000"/576]}, 0x2b8) 22:26:05 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x51, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0x48, 0x0, 0x0, "b2b6a77f06ddcb33a8fac63016b69944fbc6b2c7a0a923cbd4c6aeb00ae99a70317fb463bed350139e79abe8fa8aac7ffc7f613357ff62"}], 0x48}}], 0x2, 0x0) 22:26:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x701, 0x0) dup2(r2, r3) 22:26:05 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x7530}, 0x10) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200960000000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 22:26:08 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000002d000b05000000ef1b1ea6c9d6ff63a5", @ANYRES32, @ANYBLOB="00000014f1ffffffffffffff0800010073"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:26:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x110e0000, 0x0, 0x0, 0x3) 22:26:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)={{0x0, 0x0, 0x80, {0x1}}, "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", "82bcc03e76bf70f860388edf1c2d9cd2ebeb271386048ffbd34a2100dc35ceba0d71ae862fb74a7b7ff52fe411e233a492246584d82cef8c518203ce3f7fbe539502db2a99fece442e3c6ca5e2a69e2ad7c457180e6807a9196dcec7236758c25cee76a20814276cc47c67fca75c0350522f57e754a27f40f30d368f82c52dad1de1955d76eba5fab6ad572efb0ab5da3d8474257f294a453796864f09b5690a5bc4e6f4397b98f4c88a12126e29baa157855b298dcdb94e5a8de1bdf9813c28c6a94ea37ae447ed6ff871c802b841187819ce12107c7ef0bf5c75cf0b85a2d0c2cd399b2d19261997684f8c2297e14aebfe5c01e249a4d5b429429873afadb5c6e119677803c2191561819ca2a0084c48aeec6f48c5ebeeecadb49cbfd583d93beb4c9e401a5ccd6c03807658cb9ca5bd2cfe3ba4dea82b12c3a0731e1cdeb3fdba020c41580f512eb825c3d9a1457251237cb994b52cfe50467fccf4ffc29eec14dcc0b55b6da03a3529cadc7c1e3c7d85935ed9f7065658fa5df761afd61a25d9f98b8fa3c25cd9b33426d555caa47020e2b243cc0093a11be56ac6e93a42e06a59ec8138177538ed7c55592d1727dc6942a832001a228df0bce03ec962e13e7d5664baf26fb82506d262cfa4309cf46d5a0e2afe91c5330b2c552f01c287e87432412ac53ffb37829afc40ca808e6f0116ad9dfaff7848bbf7c40a726cbeefeb156ffb592dc068a75219e09f948db1bdf2aca0b82072ad96d2b1278d80b96eadf2da9e7e6036daa768e7791be4efcf868a8ca100b17e007181bb2b36b4ab753097ffb010bc5fd4cb797328b9547ee9b4d8f61f597b8ab66e43352fe78fc72e1162f27804ae8c36de269bf991d2ae8a132762c5455641ea5b3606ffab362bad2b0bc2152372854b87de6eda9453683f8b5ed2b77e2f13dedc8173a694a860a74b4a7bb112102ecf0dc1c811651411063782675589e231e207b49fbcb2f07415530c4abd5a6cde9ef4ec633c4219b4119565aa07393363c55c955527fc514d7d89cbd1facff847738a3a2760e5dbff0c5c9ab16a740a7691bdd1a3b1a9d5dc5355f5502935efc8025acd65eec514c3444a14a23db4a7884e4a654c9a1dc75b37ff606c90e7a58f6a1f5fd56968a5f8d23cc003571d6e1f925077746d1ceca7bd0821b7a6c71a48e74ffea4530d81a0aad1317a4854e571881764ed23d56e1a5f031c51f9e27290eb380ae5d53834d7761a80aab864f39a39ea7ae6717d6a0d9ad7b2687d2212c3456ad28fd29b50f458ac66afa1bd4e8549ebfafc8ab84850234197a02ac6d05ecc04a05a15eb06f9832304de30dd1060754edab5c7d4040025e2f837c2c3291c660cd1911bdbef6df9a9b1e541c3b0c5d8fcec4e12135d3f8e0a20f54dc9950c16fa836baaf2a1c26e603c0e9dfa62996359f500119a28bc6966491bea82e943630d132bd1c9d1b24595fd285043577cb8bf3a0c2f51a652419bafce95ad6dcd8f21ac34f0cbb9bbc9920e8a6a22add89a97758ed62cf08e6d057eeac89618a6a22c4cb73eeeaa5ba8d4b6beb2a53f6204de140916bfcb708bbf412dd476154e18db30458cb76320d752b0bc0919542027bee9327256f1a28469f51e29189acd42a1d2f401566d3a93246353682ea01335c726fdc58747c624efab17c05d1d2351c35f22b6de363205fb38b7f9a55187cc0f39d042a4b3340be5167de3de69473f9cead44799838e144d45be7d190414789c13d13d52079c99056cc609b449fb4cb66bc6e3657b9ccaedddd8737ddc74e9976e29005252480db9dbed20ae2932a72421066525ab2ef4eccd9fa4ccb3cc4a18add0ddc13de70551e0ba82bd21f671a522774f4906b8e8a746b608c81032292576d431421937459464085a62692163d4bfd574b22bfdea07b7e95fd30daa6473d0fe6113cafdb19d24dff4a16e42bcd24403ce2a8310bb9f627fe17cff63987d27cb6254139b2037bf41a4aea8bf408693539b174fc4df446c4d3b97382d1eb9154010edfd2a42b5dc091b82778763336b790b4727f197556af46ca5cea63ab5b083f825f99635214d31996c363dbfd7f40f08767b294f8c90cfe2d779a331b9825c51b1a61d66c6b5c3e08fdd497f4a2be66d8e465f4900b40d84583a92e747b3f67f2bb59fde628e079f43dca9788af28315064cd66c12980cca310e9f8082d9e9da6926d111ec239062cee919d91ca9c8abcc2e3790b737227e3283faf35ef3348aac8895c3099c94809ed5262dac9020c6d204879782a30203bdfccc7a58d5d0709c6e95633423a16b491671b8779ea1c732c51093aec575224b1d2701f7df7354757dc4ac6b6ef72c4f4a8e8445b118961c10dc2d2ec2296351874356b5156a7f8ca5bdca5d2f34e4543ddb5a6a70542ebb49a5fef9748eaf5be47c65783d8139d7b8b3b1d9823f6b81f4e6816bfa3d3b5b45d0e9e5dd564bee8c5dfca9096766fa18009344aabae87da5bb4404ae84b2beeb3a41c91a1df281a31210a548f16db4546a4ff517746aa17b8b56476a6ad5b65dba9b161988adf0caa8b8b25a3427c83b58bc82907ceb34784d3b6b5621825ef83a1e57aba1aa66e261b6edede61ab369c73cfc7e40d6c72dd0b15e25d79a06495383a0e10f115d12bebe9bd69073181b1241736fc4b02defa4f19b5e3bf51bcb628131d3c76e1f15618965487b630519cb617369473344428fcc246e2ebc5b2d666bf22276c03c8273b3fb19e35bb053567092371d8ccd72ea17158b891cab8990c581468e08f1fea14e2a68d268f9b8fa4323d8682f1d9da14fa97b0bacbce77353135864bc6ae58c64a9375d914ef66508a8268204f3aecce390fda47fb5bef845ff92e65121aac3745a45bf72b0e92eef1ed335a0690806467b1f533895a6ecc0b9e9831a3948b64106ca628fce4d92dce848b3f4e32e8a7fadc163aba3f28ae44d52735364d7aa07bec7a7d3297b5e01d41a8c3187b061abe2d35a746112b3c7f10a0298115a15176554a40250a527b511a88153ed068a48b01eeb97c0ef8725d97f3af5bfcc7026ca8539a51ceddc4fa5c135965739ef7d332df448913daa829895e77ab63e35edc059f9db45f0f06f0786a2149562af20441be0b56038ebd814953bda899aed42ede6fb258b41edc5e823b2d71e62b619eccc30052d094ca80898fbb44d449f982e1dd0802a8093dfc10b84b406f96ad116c2ce79a22a2494cad28ad38c360582f8fa7d30257389557434763a8ffc052de5af737abb55e82864ac839085e66e7e84fd582af14857c543f955050e20c9223c4305bdd59f3678b93e93a281402a338814285dc4a385cf8f073af0f81f1caeb6427a66be64bc281bf20c0dd49ac006f3d4410fc9cb61a8df6674a4139cb15c82cf2a5a5f0b403ecf9955721e96be3da3e446b4d218ab09b6556a6e6d0c07db7cec07979d560c34fa476b9c78b8efdd6b1948a7b2597aa701d96cafa886f0931297f3ff24987390511798ff2654204af7d58ef9d072795e47d84568c92d8b89a128dc17f0edc31e99b091d1ed80eb1b61682f361ff96abf1250cc40f6dd11c4065dd92bad90ec860137ccc0367aad65ebf91d7ecdf89bb7cce75e5746764e1b0e811729bab6380a9c023c6739314a2f96b7176d33b5980c00ccdca02e263517fa8fa91511649b6a1ea8b5bfea9b8473599ad553b43ba7de9f3c4387504e24ba312d93dd1cbce9846175585b9bbb9477f375b42a50ed54dafc51927616dbe13c26460dd6b5b58c1b926381aeedcadeb726e45ff8a7f2e72887828e39a0a8166bff068fe9a65dfcf85c29a8cf451814c6a324bf3113fc58e04f8778f34cda64d2b0c68ea9b965206bb103717d0abd9e55e8b79944a54c4e8438d36a8605b19dd069e26d4fe8579852dd82cd05343954560edbcdf805cd3c69dfcf46e80adcfe1f4955b1c173c97b0355f9cb827f2ccad11dff381e1b9e00f40ca44b6123e59bf280cbaf7eb6b9d1af4c07c2e8f133b93b0109a7a26aa77b202d4ed95ac9f04a37fcc7bd45767f5ea1a4fc8029e5cebe6335cb10d496a5435c76a25cbbb9556d9a362713787dd8cf72b0290fcfbd56d01db5ae5eb950a5115db8d7b0e858a0e97a2667f070803915b8877fe2175c845a65397e71fe1e0c7bcf14e7688fceb6ec1afb2ba23497dd6ba1671a250f79cbdc9e802764538d2c2d8bff9619a0ef61c6ca091e8b7e95cf2573d25c944c8e0de157a6f2d557751b0effd125a8851abb1920241211f94fe68b1d1e8e45891cc4ee40b5af97406793614ea848f03b113c15d14215736b4e110137b04b6bbfa1fab9693992fd631aed707ddcc1a973086fbfdd6911ff5db78f2f520ba5a372b5433092c70fc57ff12f171887926f8c167cbc5b63de2197902ec514d0bf20c6dbb50caca02bfddc3ee13f70f2703d7706f692c5c10ef7bd64822b45944263923666ba599354a6e171188f9b5a0f8156460c71df9eccd7186f88b0ae5ff53fea19a3d080313dd42425194516846320113e919b55f5e3938362ba779977caa7532b522a46b4d17f576f3fbc0addaaa1765d9e850dcc1404801076b18e0158f2b55c83d8ba40be48dc6beaaa21c565d2aa286f49079eb3c88b0d0236a06252d3954ff9734004840bb9eb360f12a0acc7e5323230ed4745993e9d638bbe77501836532603b8f601478668a7f150be283eb89905cc6a2fc73cb7c93a5921814e3fb330a6c4a8940355a5aa06136725762ba92353149975345eadd78982f59a5597a4c56ad2ca3731d62664cc98a5e417a72aa3d9d4550251ec71a5bae5946abdf3bca3d1c7afc5fa2d125b657638e9e0a48777d1583b2542d25d9a42c8dca21cf77289004773e9456e42bfeaa9ddfd394f09da64dacd47ef834ba484bbe913058d05dffdf5d12005b72928a617ee3cd48660a899ec606dc849fd2f3fb16c34ed795fcc2ebb3abc2acd552522d36a66b2404b5645fdff22312ec91581a232a1a77d2f2e82d5838610b1e79788d14b87cbe2a14c3c146e6ca7b8a39757d8762dc5bc41b00ed1b015ab99266acaef8b5491f107971af10cd6827fdd568d1bc4ac5375cdc57a5d725c051fb2d2d73a2b4729d3596f4ac6e9bba6fca48b352432f66aff486e1294ca480c75c64039d72a3e8b91a9e0db3c14e0ab9d2537650448f04fd649245d420de7ffb5065f1637c1561431fb2b63af30c1c457e5a28ab782dd8d525acba764204beac2c38cb25b4f6e12a80eef465cab510addff7185ff7a9c1d002bbee6117af845cbc12ce3f5ae5a507d94fb72c2b6df17c31cac54ecac30a066bcc662f280b414aaba16bfda0b7bb643c06b3e0d5a0794423cded5d0335fa59c5aee26c62f3df75554e35a972795c2b8bbc1cad7ca671a9314a20f2249152e1e0ef47782c940ebfe28e25361b521ce3b19df361c9ec41a2ba99c1b59f1e347464e8b70d531ca1f5eebc701afe0297ffe9d3d0f81fc2625902cb409779d7e1bbf2352e38acb6dc75fe8db9b48c4dfbd4f317b9e00db10e14a122accf74f7b56c1e5cfe4933216283205cc29b6c3712f086f4ef1c772d524b67e41b837b80f95c762a2f00c4333166a02ebb5f2dcf8093676ade041d955a9979a4c0fa8f6a505b76e78c21193dc283141cc092ae3914448a304933c13cce5b6707c11785f6c4e0c2066c32287b00d2a1e81238cd58cd427de8e1f9e17c2877145fcde9c7d277328cdc0b3b1f69f76d7022788b3ce6dafae76bec8f30d1ec042fad89e44ab2d23c798b8b79bf8d01f44bcbbb9fd"}) [ 1165.822195][ T2652] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1165.848278][ T2653] QAT: Invalid ioctl [ 1165.886497][ T2653] QAT: Invalid ioctl [ 1165.940326][ T2653] QAT: Invalid ioctl [ 1165.982837][ T2653] QAT: Invalid ioctl [ 1165.999962][ T2653] QAT: Invalid ioctl 22:26:09 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x10) [ 1166.038131][ T2667] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1166.045770][ T2653] QAT: Invalid ioctl 22:26:09 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000), 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) [ 1166.119585][ T2653] QAT: Invalid ioctl [ 1166.156389][ T2653] QAT: Invalid ioctl 22:26:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)={{0x0, 0x0, 0x80, {0x1}}, "e574bf4d524d963be24d8890a8c385c85391c94bcebd014a9a228a59b48622a7f92a2be432c16f9fbe1e50c3704650d830d50081dcc34a0912828ad65d08a6cefb69854ce94b2d5e2db83931efe03503f6cf9dcf7eed700021473607e3011aa20d37524045d63c1eb04db9cb36f16c76f4d0d16a5b57e4c9040b56dfd981b27aa7bf88a9f41d58a9b9a74343a2f44031cdbe80b73d8a624cdad35da6e33fce11668d0bbf3ed04ae9300ce4dc3a55bd0b32bce56973116aa8005abe0d45991c4aa847412ac0445b409cf327de87a653fa56fa9aedb33c75357d80bdad7878af6332adc013e367db2a4d6f4360b5158cf7ae465dfdec59a148525953fed28a4473e6986e62635045ac9b991401a3a14c28c16a1442f88436e6fd3f928c3701e22388972dcc159ad27a7777a39f1eea25d29bcfb4077bda1bd437ad1ed23a94ae115e15ad1c2ae9e3b6c22e2771c9f52a1ffeed2bf8ca0928543d9936f5ed0adf823eb6891b683ddd8c7614d274522a160c1420cceb7b46740042d1fa87ccaa95ef00c0ccc9871cda1ca6c418c303f084a6d33e95c8a5a1226b10aa2d171d36aeb3e71651c5f4f882dc27cc2acc06519e94434a9aca7667720a8d5e9ab2a76af3fe0b2c567acc1cb526c38fe9d813bed97628421d6dd887493163553ffe98e8a6ecd8c095d9dba518b23d7838ff2dc7ce30055d584b461b1acf53e485f71a822430c080e594ddb1b6cd25bd7b7a0c7da6e7aff22ec315b9ad2dd17ac7e02e5e582523e2f6c628363b52ffc9bbee08a413773c89e47d5691a6860bd1363123d66e36e8564cd336d2bd2239fb2885782446bc509381795263a4b95e51e7eb9e48831093bd3a7e4560450ba2c52adfb972d23313070158d9698877ae006d86fa75d110374004feadebe5321f92946acd1c82c5c40142a88dd225ec9e319b76cbaabf7f0f598a7e14d300502449db1cf7523aa58285e5cfb265f8a3245ed30dcd20f4abcc968be0a0b38522574629d1a314e1e7cedc97b1d1b1e5ba31196fc35ac5398135b1eb118b303002d8a798e2f3d81974aa5978d2643ef1f2869b1e1c3efcd834bd101c961c90044adb38c0bf4dd78e57eca5ea59a54859b727e3cbc11428c74e2ef01cee0871fa4a21f9584f868158af1fbdcfa9039d6bb9d3bc773466b7084625fc9cc7e432bcf4f54e32eb46afcd1d7d4653392cd81b0f7b8cf9fa10bd982c55bef6e5c99710405273528a8cea71447ba80033027c46424a355162e09c955acb41d417f2ace300ee51a08b7120476ddfec4780d9c8c01de03d65cffe7c2ee0da721d6d927188e71bc6a2646bf6c9bd6d3b5154873c273dea5a3fc926d7d4795b0ca14d0d8ff16eb7f6d22538e42c08cc9881072615b4c7f451cef57b3804e2a89ba51ecdaccd8b7e4add72b3de6b0cbfca7a90b3ae9b41ad05beb518a18c018afb1e6ccae61b19beb067256ddd911c7f58da93fd8f9a91a875ea682a40d69984421fb6755b6f1d4711bcdf7fed9ef0904c5ef47651a25e9f60f7f1372c6e3170b597ab4f1b4fa9310bbca4fb35e80da37d47e2e3ff010fd87a464c6d6bdf8d9d63da31eae3a540cdf7070578b6a4481e83820c9f77c5e2ba1a5381e8e5109427716f28693ece460c05235a06f414d1e3afbe2aa89932efd12483c362e05730c32cbf7d5296eaf91808c3def445397e745ceb6fd0362ae73902b140adef075d7ba7b996b4cc47ca021439f93bf90ae8815d647bb796079f6f257dcd9b09f46449d0962ff20c48d35a89bc9b12fdfec8e3ea4333f0f3996bbd19c1a91d735e7b6549488e64b3febf8b8921b60853470f8770cbd1d2c38a3f7792be344561885db20a387b4783b2f2d8d2478e7c0c28a4751bf4f1675b15a036b6d416a5b96fd4a27b5eea24a6547a053842eaca51a0188be888fbe9410ed5445027fba1d469a61ec0146473e749dc47993a9423fcc2cc3387bd8079449bcd2399b81b2e4004d3393a728b7d99c1e6db126ada0341943052f61b72c5d5f7a203833989120e3a39ce8076a35c648d283d0310ca7330fdd4761765ec556da666861102d39b8c718e3d6a41b507e1767d5a8b8c3d2b1e3482057bdabc12fb0f91ff54761a95d153d529557457279b96f5f10fb1efeee377d45090506ff7b3292910c058bb1840ded93a0158d5a478dbb5315f7d2c9fe631cbb6b69ecfca8bf1e91aca52488ddccca31b28bed861c43242364ab8f719726a54f534125f91fb4aa644a6c8c2c680eed13f1b39c29e34e793eb132988f410c52e9e1c0c1298c0e80280c4ee5b8c56532b13aa5553e2045acd86ac7595d832f0e9fef85412f40e79f252320165d5f995460f533d32dbe861e2dedf783809cd319520972fe8dc20f76146d204a107717304e5e9a26a8e157f28aebf2835befa1cdeb6166259a25e7466a3844f7e3553bd9b37504850d0faae735e8d177b8a40d59012c077e02cccc43198ae0d75233bb35bf474a344fae1411b9722ae7d0ea9a33684e8801df15a8a671a75d213cf45133a000f0ea306e2ac4131d39e4d0051bf52352671290ccf6014b7e3a02b1ca744ac73704d529c1255f3fd53c48e4198c54d0080a4756e6863a167b41753000ed6b3258c63046bd9cea5300042dac0c549d1bc834f2ab5389fa4adacbc46fb528c2a78e7ab70c59780738ba27af6aed366da9bde7b27166c44d25f45e1baf7608fa2f437739b95a60052c599c07e71fe9e0b620344a58ef1899899b3f61df178a1d3117e82548f319afd9989bdcef3a889feed6de48cac9cebc478d5bac90928a03a9fcb7ad641ec3abcffdd19737af81ff123f4d0c1946bc7d20d17a945bb8f130ecb844bf47aeeb39f43028910b6b76b05520fe76919f283449fd1abc08c49e271b7fb8bdd817e82c86a2a3f4643cd1a895265fc6311ac49335234a73ad972dffcbd76dc780a834dbaa04421cc49502949284d2c604daba45548746d5960956defa374d8cb10045e55b018a3063678e2264475fc5bb79402df6589bb5a1a9e9e84d31459f4a391edd1042bd95c2d2d1e43e016b776fcb6809a3edeeb08d37b76810359b7ddeb48ae7a1d183cfa2c62b585d706960496e04d44f98d5c87ff5fcfde269cc6e3d9768574acc23cea2eb7a740f01e911a1477331bc187e54a2546d49da842c0c691076a7170ee6b92fcf9119f33f3dd6ee4bbdf8dee0142ee6d0f3f2e446127abaaf64ea6b28650b313ec2433a6fa6d2814714ff97248a490812abc51eef47a757e991b3204c7066abba828998719552d3bf6e4254dbaa97499016851d99ab6cc5ec020a7c16aaf317aaf02f2bd35570945ceb4e668adb94407fdac1ebecc9127418fc73b77f6f27c0303cbf2d72392c9259b6b79ca822c734c49b3e3355219023e64d534b304d6bbacd9f1d3ab443d65c303a5a4b4a456f60371d991b32d69538852aa7eee026c2ca098c87702a7cf25454fe9162f356b3d080216da123b0b01de65867d443c671c4d49318c6175c67b1b791a32216908383dbbe120279b8e56b195ebbebd3c7d931e8b206f7c246ad733d5d9cab751a862f38b9c06d6a68e7215e40ea427af7fb3ed0c1aa1328906b69c338ee75aa8a4422cb4bf35b2284ffc59af6fe883301697390b28a9bfd3802611695d9407be9110935be3c76402ef971a76b2e302662e236db8f38c46a95c4a3826922dbf6ab06bc08dbdce76082ad1f7f86ef8e9f1be70fb7302fe2da535ab19c5d4660d23b77ec6e67583ed62011347a763d6a409c8704066d2054932b62baf879828695b3eb02d8cd6af4a88bc48e911bd45e9d5709f462dbb02dedf8eb7ff2ca7f3f35c5cccc10d876cebda72e02aa4a59a2fd23ba1b5eb285a500e96c395e145ec07009781bbebce04a0ba69690c084a1e5dfbc536655bfec237df118b0d3230299ca844500e940d24c934015520e250f6e2f44bd4c4a811740c6cab25536229073184377f13bdea413df86cdf2c21a83aaa9692d3f9d3f5b053434363748ccb3070687a3bdd0da9d0eb809a112d7cdbcd8273518d0aa5fa16bb4271d452f904a1e545559b33ace737ed6d55064086cd44b40f1ec357e4c164c9e3303f4346f2e0408d82409ab8c5f1f3a71ab44435f7d82e148d7227ee80fd9c42903c0a2ccdb0904d7e6271a9b7ac9ffffe14ebcf2f5992198cb95f307e93e4a19101169df726f3a21a789df24b79ce7006cf47c7681fe9e5d85fd08d005e907da3987b961d6f1c5b4687eb69ce5ead6911d4276b15f8f0debb435bacbe7948dd202d6db2adffc3b3f1c9a73fedb1f0a0339adeb8b11e2c09d5e5e9d70c0fcb995946a50af87f2b4d3254d7db8323af176d8a8bd9e06e4399a085c945494bb7047488594654caa3b3cfd08edaf41c4be29af4f95f4b886ceefc98c7fe7d26f45657cde70646931f2ad64519a7abd0bd4ab586b9619d2c5165f942a74e4e1ac0f324f23acf6e27ec58514a78171a738c18e089eeb22f75115625bc4bc26184c473cd2c1da1c9ff97c02421cd0bb6e5008cdaaab2bc10d017be70eb1a6436fe55fc4a363b7dfdeec443844d461dfef59b0e7288f98495e118b11315ec9ff1791f041c20951b2e7542a1649e464510edc19191eb40df6cc179e5cb87edbe6e18906395c15cbf947f532f8fe9cf315c08010526093e2af896d5335337f76241cc907e5732c685aba47a88d597f37044f7ea3e7a84ea4aa4275267efe83f0035d33246da036bd0c5e76fda1b5c709749ea06206e8190a365b1c569e9342c8d9c2bfc5d6da8272989e731b13e0b2dd422475af5ac78b037fd28876bff9bee2a1bb83d697008e8e268cfb089e40d00918f8b132dd35013e30a18be7f2b4b1d6dc76eb7cf7c5416b9e39fde8b9202c9f5934d045f85fba8f96f4c73e94e2fc6c821722771602da3b65ef5156c5aa397029c236cab038bbd08c2b1fde206dc320881c7d9cc4db5cfeb65d66e9bf1aeceb190e4203ab861558df45d8ad0138c8dc643ad3051cd9c180d8ffd0ef7473d31a56a0e188f7880908b192798e0e8ee194ec440aa93063ca73651eb39efabf02a43dc103d974e9efa2fa4958a52e8a525f3cfd4758ed6f51a08bac18398eeda510e5fe33d441b026e81c9b6c62a1e76082f1192c8264edb333ea32865b6339074193e8ccb2ff74c61d847b5f0079628e339e3eee0b43c5182a8b72976b9bfd776714ecbcfabf3fbe1c951ac68510eae5249dd469088b52c9767adadcb8d50ba25128a135052c475b46142508eda245901471b88a45c2c6c01ee8c8e77492e68d67199dfbcdcf7198e41e2af5a0faf02f1e51c5d17909d3e5a2b30af094f2c7ef34c7c0edfb9563c68ff61772d93573d7130365558ee66d6021f8d8c1daef1e19744ab433a0afc805928dda7bc7fe362a267a3c00a62c5b3fe8d79dd6a1c2d2f0c1843604f1c1c00c13d18699d4d0598901cbcfb1559b7e3ba28a5e736eff12eeb36e09065077a17d587c934a74e20dc99bf27f046d20577c203001de55514eda765381397ee2f8d062cd4785cb9ee2af2b6e5cf0a2362bed10d7dc23ec69e89982731ce2c5a38279c26d0099065a2fed7ac448011aaae5fcba7b0c08783ad7e459c33e367fe0946d0fc197217b5c27c47c23d8671befaec9e3e487401cce5512e238e757d50d4dda4ff1713f976e41c93f229d6482ce4e0fcf61193393f1caf948171308bebe0b1216444ee2e359a4aebbbbb33dd5b0e6cf64b9f3f02bf962133047e3bb4dde90fcf726b00756cdeb7a9b9b6d3b59b379f36b71df31317237b643f8a0f", "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"}) [ 1166.185254][ T2653] QAT: Invalid ioctl [ 1166.226651][ T2653] QAT: Invalid ioctl 22:26:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405c576cd12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602437bb2e9b66ff1246c93e5c0289644e334432479aed75d492b41dbcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156e9676f8f9fc0ebf89b394807474b3c3156630d40563ad9c4372975e40a7a1b5005084f485b5188167968e78cc40d2ce2a61821d9b918ff28101373eb3e27a55809a1b4fd25fad93a3895811c01d087796fb714628b33d2f3f11f144655a602008097e47b221ef1e1b7f5601ca2b07a", 0xd1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1166.261893][ T2653] QAT: Invalid ioctl 22:26:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000380)=[{}, {0x0, 0xffff}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1800}], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e22, 0x80000, @local, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000029000000040000000000000000180009000000000000dbcf0dfd52d767115a108ab3590000290000e370cd7c0e6404e4e19e4953b9443737b535aff6ea928252c55d72aff461f07731a5abe8a3e1dbf8dd17a5d5c20107f7d3553c820932a7a1e0a2131bdf68c5b02b4c56b8ec426f62bce3303277341aa7af9b5bfc54fb8f193621c44eca9d9b6ebec554a8827e4645a69e99042de4b75702b5bb8b5b145c6d5ed9b59b80a397e9e32bb7cbbcd871e42d5f5294a8b97dd474869ee89ea6f76e2b2bd514f3b6bdf2f0b41c1146d5442dd2028b12d4fcba57289f348b596bd02314621eaf665bafa4d12d9477dc2da2400302dfee1eb59db3d8fe727702bab2cddbe56e5cd80281e08cae4b85bf57059e351da20ea00000000000000000"], 0x125}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0x8, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r5, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x26, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRESDEC=0x0], 0x50}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r6, &(0x7f00000031c0)=[{&(0x7f0000002100)="d0", 0x1}], 0x1) [ 1166.333940][ T2653] QAT: Invalid ioctl [ 1166.366775][ T2653] QAT: Invalid ioctl [ 1166.405741][ T2653] QAT: Invalid ioctl [ 1166.440274][ T2653] QAT: Invalid ioctl [ 1166.478097][ T2653] QAT: Invalid ioctl 22:26:09 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x10) [ 1166.513856][ T2653] QAT: Invalid ioctl [ 1166.552187][ T2653] QAT: Invalid ioctl [ 1166.593681][ T2653] QAT: Invalid ioctl 22:26:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @output={0x0, 0x0, {0x0, 0x3234564e}}}) 22:26:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x110e0000, 0x0, 0x0, 0x3) 22:26:09 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b80)=ANY=[@ANYBLOB="70080000240007050000003e56c3640000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100746266"], 0x870}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:26:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001680)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 1167.015360][ T2697] QAT: Invalid ioctl 22:26:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 1167.039656][ T2697] QAT: Invalid ioctl [ 1167.047158][ T2699] netlink: 2116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1167.064656][ T2697] QAT: Invalid ioctl [ 1167.079530][ T2697] QAT: Invalid ioctl [ 1167.093844][ T2697] QAT: Invalid ioctl [ 1167.118178][ T2697] QAT: Invalid ioctl [ 1167.141556][ T2697] QAT: Invalid ioctl [ 1167.163396][ T2697] QAT: Invalid ioctl [ 1167.191852][ T2697] QAT: Invalid ioctl [ 1167.217566][ T2697] QAT: Invalid ioctl [ 1167.247655][ T2697] QAT: Invalid ioctl [ 1167.276570][ T2697] QAT: Invalid ioctl [ 1167.308185][ T2697] QAT: Invalid ioctl 22:26:10 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4, 0xa}}) [ 1167.341943][ T2697] QAT: Invalid ioctl [ 1167.378811][ T2697] QAT: Invalid ioctl [ 1167.405319][ T2697] QAT: Invalid ioctl [ 1167.445553][ T2697] QAT: Invalid ioctl [ 1167.481835][ T2697] QAT: Invalid ioctl 22:26:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f7f8054617cbed5f80004000015", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1167.507539][ T2697] QAT: Invalid ioctl [ 1167.534437][ T2697] QAT: Invalid ioctl [ 1167.564371][ T2697] QAT: Invalid ioctl 22:26:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1167.592403][ T2697] QAT: Invalid ioctl [ 1167.607148][ T2697] QAT: Invalid ioctl [ 1167.626371][ T2697] QAT: Invalid ioctl 22:26:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x7, 0x81}, {0x1}]}) writev(0xffffffffffffffff, 0x0, 0x0) [ 1167.651228][ T2697] QAT: Invalid ioctl 22:26:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffffff, 0x0, 0x10, r0, 0x83000000) 22:26:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 22:26:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x110e0000, 0x0, 0x0, 0x3) 22:26:12 executing program 1: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f0000000300)="24000000200099f0003be90000ed190e020508160000100000ba1080080002007f196be0", 0x24) 22:26:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x7f0f3f216f9ed7c1, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}]}, 0x58}}, 0x0) [ 1169.595527][ T2751] QAT: Invalid ioctl [ 1169.626214][ T2751] QAT: Invalid ioctl [ 1169.655237][ T2751] QAT: Invalid ioctl [ 1169.689768][ T2751] QAT: Invalid ioctl [ 1169.720179][ T2751] QAT: Invalid ioctl [ 1169.765750][ T2751] QAT: Invalid ioctl [ 1169.803607][ T2751] QAT: Invalid ioctl 22:26:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d05}, {}]}) [ 1169.833925][ T2751] QAT: Invalid ioctl 22:26:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) [ 1169.879511][ T2751] QAT: Invalid ioctl 22:26:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xffc2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13c1c00]}, 0x48) [ 1169.927050][ T2751] QAT: Invalid ioctl 22:26:13 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0xa0be}]}, 0x58}}, 0x0) [ 1169.956790][ T2751] QAT: Invalid ioctl [ 1169.982388][ T2751] QAT: Invalid ioctl [ 1170.004505][ T2751] QAT: Invalid ioctl [ 1170.025472][ T2751] QAT: Invalid ioctl [ 1170.040232][ T2751] QAT: Invalid ioctl [ 1170.064124][ T2751] QAT: Invalid ioctl [ 1170.101430][ T2751] QAT: Invalid ioctl [ 1170.139034][ T2751] QAT: Invalid ioctl [ 1170.181692][ T2751] QAT: Invalid ioctl [ 1170.231593][ T2751] QAT: Invalid ioctl [ 1170.265262][ T2751] QAT: Invalid ioctl [ 1170.292864][ T2751] QAT: Invalid ioctl [ 1170.326369][ T2751] QAT: Invalid ioctl [ 1170.354392][ T2751] QAT: Invalid ioctl [ 1170.379860][ T2751] QAT: Invalid ioctl 22:26:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}]}, 0x38}}, 0x0) 22:26:13 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="9695485c4561b8c4319a63651cb8d904c168c07f8e50d846686699d4", 0x1c}], 0x1}], 0x1, 0x0) 22:26:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="a16965678270", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, "08006371ae9b1c01"}}}}}, 0x0) 22:26:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 22:26:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:26:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000700f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1170.937757][ T2802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1170.940797][ T293] tipc: Subscription rejected, illegal request [ 1171.038986][ T999] tipc: Subscription rejected, illegal request 22:26:14 executing program 5: syz_emit_ethernet(0x80, &(0x7f0000000400)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "df00", 0x4a, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}}}}}}}, 0x0) 22:26:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) [ 1171.250552][ T2810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:26:14 executing program 1: bind(0xffffffffffffffff, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}}, 0x20}}, 0x0) 22:26:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x0, 'wrr\x00', 0x23, 0xfffffc00, 0x8}, 0x2c) [ 1171.439262][ T2820] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xd 22:26:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x24}}, 0x0) [ 1171.518682][ T2820] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xd 22:26:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)) [ 1171.574192][ T2822] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2068/0x2d30 22:26:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) [ 1171.620280][ T2824] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 22:26:14 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) [ 1171.851017][ T2824] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1171.863127][ T2826] device bond10 entered promiscuous mode 22:26:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f", 0x14}], 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:26:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)) 22:26:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x400) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 22:26:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x3c}}, 0x0) [ 1172.471417][ T2824] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 22:26:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 22:26:15 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}]}}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 22:26:15 executing program 1: bind(0xffffffffffffffff, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}}, 0x20}}, 0x0) 22:26:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)) 22:26:15 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 22:26:15 executing program 0: r0 = gettid() r1 = getuid() r2 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sendmmsg$unix(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}], 0x198, 0x0) [ 1173.045293][ T2895] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1173.175600][ T2895] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1173.193304][ T2900] device bond11 entered promiscuous mode 22:26:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)) 22:26:16 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000080)={0x3ff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:26:16 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14) 22:26:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}]}}]}, 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:26:16 executing program 2: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x10004) r1 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 22:26:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 22:26:17 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, 0x0, 0x0) [ 1173.999792][ T2942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:26:17 executing program 1: bind(0xffffffffffffffff, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}}, 0x20}}, 0x0) [ 1174.380315][ T2942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:26:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 22:26:17 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x15, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 1174.643595][ T2966] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 22:26:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100), 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, 0x1411, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000980)=""/44, 0x2c}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 22:26:17 executing program 2: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x10004) r1 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 1174.933276][ T2966] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1174.950171][ T2973] device bond12 entered promiscuous mode 22:26:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r5+10000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 22:26:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 22:26:18 executing program 2: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x10004) r1 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 22:26:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x2a3) write(r0, &(0x7f00000001c0)="240000001a005f0014f9f407000904000200002000000000000000000823190000000000", 0x24) 22:26:19 executing program 5: r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) 22:26:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x2) 22:26:19 executing program 1: bind(0xffffffffffffffff, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}}, 0x20}}, 0x0) [ 1176.228413][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:26:19 executing program 3: r0 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a8430891000000040008000800040000dc13382d0007009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1176.313309][ T3049] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1176.368436][ T3052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1176.449769][ T3049] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1176.467740][ T3053] device bond13 entered promiscuous mode 22:26:19 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000400f1ff0c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 22:26:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @timestamp, @window], 0x143) 22:26:19 executing program 2: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x10004) r1 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 22:26:20 executing program 3: r0 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a8430891000000040008000800040000dc13382d0007009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1177.048199][ T3091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:26:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in6=@mcast2, @in6=@empty}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, @in=@broadcast, @in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x3c}]}]}, 0xec}}, 0x0) 22:26:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) [ 1177.331637][ T3098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:26:20 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 22:26:20 executing program 3: r0 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a8430891000000040008000800040000dc13382d0007009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 22:26:20 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000400f1ff0c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 22:26:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 22:26:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}, 0x0) [ 1177.975359][ T3119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:26:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035"], 0x34}}, 0x0) 22:26:21 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg(r1, &(0x7f000000b1c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007200)=[{0x0}, {&(0x7f0000006ec0)="91", 0x1}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000d01000000f8f1"], 0x10}}], 0x2, 0x0) 22:26:21 executing program 3: r0 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a269930a06000000a8430891000000040008000800040000dc13382d0007009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 22:26:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000900), 0x10) listen(r2, 0x0) accept(r2, 0x0, 0x0) 22:26:21 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000400f1ff0c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 22:26:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x3, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000080)) 22:26:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:26:21 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 1178.591656][ T3142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:26:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000340)=0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, &(0x7f0000000100), 0x5b3048225bb3f999) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) [ 1178.755690][ T3156] schedule_timeout: wrong timeout value fffdd0c26c641895 [ 1178.763152][ T3156] CPU: 0 PID: 3156 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1178.771807][ T3156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.773025][ T3156] Call Trace: [ 1178.773025][ T3156] dump_stack+0x1c9/0x220 [ 1178.773025][ T3156] schedule_timeout+0x2be/0x550 [ 1178.773025][ T3156] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1178.773025][ T3156] ? release_sock+0x23b/0x2a0 [ 1178.802422][ T3156] vsock_stream_connect+0x4b4/0x11f0 [ 1178.802422][ T3156] ? init_wait_entry+0x190/0x190 [ 1178.802422][ T3156] __sys_connect+0x6f7/0x770 [ 1178.802422][ T3156] ? __vsock_bind+0x1570/0x1570 [ 1178.802422][ T3156] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1178.802422][ T3156] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1178.802422][ T3156] __se_sys_connect+0x8d/0xb0 [ 1178.802422][ T3156] __x64_sys_connect+0x4a/0x70 [ 1178.802422][ T3156] do_syscall_64+0xb8/0x160 [ 1178.802422][ T3156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1178.802422][ T3156] RIP: 0033:0x45ca29 [ 1178.802422][ T3156] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1178.802422][ T3156] RSP: 002b:00007f711677dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1178.802422][ T3156] RAX: ffffffffffffffda RBX: 00000000004db440 RCX: 000000000045ca29 [ 1178.802422][ T3156] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000007 22:26:21 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000000002) utimes(&(0x7f0000000000)='./file0\x00', 0x0) [ 1178.802422][ T3156] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1178.802422][ T3156] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1178.802422][ T3156] R13: 0000000000000098 R14: 00000000004c34e6 R15: 00007f711677e6d4 22:26:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x2}}) socket$inet(0x2, 0x0, 0x0) 22:26:22 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:26:22 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000400f1ff0c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 22:26:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000340)=0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, &(0x7f0000000100), 0x5b3048225bb3f999) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 22:26:22 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 1179.335633][ T3172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:26:22 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000400)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @empty}, "21b25332"}}}}, 0x0) [ 1179.475071][ T3175] schedule_timeout: wrong timeout value fffdd0c26c641895 [ 1179.482519][ T3175] CPU: 0 PID: 3175 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1179.491262][ T3175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.492364][ T3175] Call Trace: [ 1179.492364][ T3175] dump_stack+0x1c9/0x220 [ 1179.492364][ T3175] schedule_timeout+0x2be/0x550 [ 1179.492364][ T3175] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1179.492364][ T3175] ? release_sock+0x23b/0x2a0 [ 1179.492364][ T3175] vsock_stream_connect+0x4b4/0x11f0 [ 1179.492364][ T3175] ? init_wait_entry+0x190/0x190 [ 1179.492364][ T3175] __sys_connect+0x6f7/0x770 [ 1179.492364][ T3175] ? __vsock_bind+0x1570/0x1570 [ 1179.492364][ T3175] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1179.492364][ T3175] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1179.492364][ T3175] __se_sys_connect+0x8d/0xb0 [ 1179.492364][ T3175] __x64_sys_connect+0x4a/0x70 [ 1179.492364][ T3175] do_syscall_64+0xb8/0x160 [ 1179.492364][ T3175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1179.492364][ T3175] RIP: 0033:0x45ca29 [ 1179.492364][ T3175] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1179.492364][ T3175] RSP: 002b:00007f711677dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1179.492364][ T3175] RAX: ffffffffffffffda RBX: 00000000004db440 RCX: 000000000045ca29 [ 1179.492364][ T3175] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000007 [ 1179.492364][ T3175] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1179.492364][ T3175] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1179.492364][ T3175] R13: 0000000000000098 R14: 00000000004c34e6 R15: 00007f711677e6d4 22:26:22 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2007fff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='!'], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='syz'], 0x1003) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8482) 22:26:22 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x8402, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x5016, 0x0) 22:26:23 executing program 0: r0 = socket(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0xb56c58075ff72a5b) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 22:26:23 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 22:26:23 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93"], 0xf0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) fchmodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x2) sendfile(r6, r5, 0x0, 0x20000000000000d8) 22:26:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, 0x0, 0x0) [ 1180.561020][ C0] sd 0:0:1:0: [sg0] tag#1296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1180.572370][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB: Test Unit Ready [ 1180.579112][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.589011][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.598907][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.609549][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.619421][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.629402][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.639299][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.649194][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000340)=0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, &(0x7f0000000100), 0x5b3048225bb3f999) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) [ 1180.659303][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.669459][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.679439][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.689389][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1180.699453][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:23 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000f, 0x13, r0, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000a40)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0) 22:26:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='oom_adj\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x2000008000003ff) 22:26:24 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) [ 1181.179626][ T3214] schedule_timeout: wrong timeout value fffdd0c26c641895 [ 1181.186741][ T3214] CPU: 0 PID: 3214 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1181.188550][ T3214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.188550][ T3214] Call Trace: [ 1181.188550][ T3214] dump_stack+0x1c9/0x220 [ 1181.188550][ T3214] schedule_timeout+0x2be/0x550 [ 1181.188550][ T3214] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1181.188550][ T3214] ? release_sock+0x23b/0x2a0 [ 1181.188550][ T3214] vsock_stream_connect+0x4b4/0x11f0 [ 1181.188550][ T3214] ? init_wait_entry+0x190/0x190 [ 1181.188550][ T3214] __sys_connect+0x6f7/0x770 [ 1181.188550][ T3214] ? __vsock_bind+0x1570/0x1570 [ 1181.188550][ T3214] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1181.188550][ T3214] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1181.188550][ T3214] __se_sys_connect+0x8d/0xb0 [ 1181.188550][ T3214] __x64_sys_connect+0x4a/0x70 [ 1181.188550][ T3214] do_syscall_64+0xb8/0x160 [ 1181.188550][ T3214] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1181.188550][ T3214] RIP: 0033:0x45ca29 [ 1181.188550][ T3214] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1181.188550][ T3214] RSP: 002b:00007f711677dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1181.188550][ T3214] RAX: ffffffffffffffda RBX: 00000000004db440 RCX: 000000000045ca29 [ 1181.188550][ T3214] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000007 [ 1181.188550][ T3214] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1181.188550][ T3214] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1181.188550][ T3214] R13: 0000000000000098 R14: 00000000004c34e6 R15: 00007f711677e6d4 [ 1181.366827][ C0] sd 0:0:1:0: [sg0] tag#1297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1181.377597][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB: Test Unit Ready [ 1181.384458][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.394379][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.404257][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.414179][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.424068][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.433977][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.443862][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.453772][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.463657][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:24 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='\t'], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:26:24 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 1181.473553][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.483455][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.493351][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.503211][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:24 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93"], 0xf0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) fchmodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x2) sendfile(r6, r5, 0x0, 0x20000000000000d8) [ 1181.660205][ T3224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.777499][ C1] sd 0:0:1:0: [sg0] tag#1298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1181.788144][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB: Test Unit Ready [ 1181.794946][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.804884][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.814804][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.824767][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.834688][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.844632][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.854550][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.864503][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000600)={0x0, 0xf78, "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"}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b0764", 0xff7c}], 0x1) [ 1181.874446][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.884388][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.894347][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.904293][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1181.914193][ C1] sd 0:0:1:0: [sg0] tag#1298 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000340)=0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, &(0x7f0000000100), 0x5b3048225bb3f999) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 22:26:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x5d, 0x0, 0x0, 0x0) 22:26:25 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93"], 0xf0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) fchmodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x2) sendfile(r6, r5, 0x0, 0x20000000000000d8) [ 1182.589345][ T3238] schedule_timeout: wrong timeout value fffdd0c26c641895 [ 1182.596492][ T3238] CPU: 0 PID: 3238 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1182.598493][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.598493][ T3238] Call Trace: [ 1182.598493][ T3238] dump_stack+0x1c9/0x220 [ 1182.598493][ T3238] schedule_timeout+0x2be/0x550 [ 1182.598493][ T3238] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1182.598493][ T3238] ? release_sock+0x23b/0x2a0 [ 1182.598493][ T3238] vsock_stream_connect+0x4b4/0x11f0 [ 1182.598493][ T3238] ? init_wait_entry+0x190/0x190 [ 1182.598493][ T3238] __sys_connect+0x6f7/0x770 [ 1182.598493][ T3238] ? __vsock_bind+0x1570/0x1570 [ 1182.598493][ T3238] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1182.598493][ T3238] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1182.598493][ T3238] __se_sys_connect+0x8d/0xb0 [ 1182.598493][ T3238] __x64_sys_connect+0x4a/0x70 [ 1182.598493][ T3238] do_syscall_64+0xb8/0x160 [ 1182.598493][ T3238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1182.598493][ T3238] RIP: 0033:0x45ca29 [ 1182.598493][ T3238] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1182.598493][ T3238] RSP: 002b:00007f711677dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1182.598493][ T3238] RAX: ffffffffffffffda RBX: 00000000004db440 RCX: 000000000045ca29 22:26:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) [ 1182.598493][ T3238] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000007 [ 1182.598493][ T3238] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1182.598493][ T3238] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1182.598493][ T3238] R13: 0000000000000098 R14: 00000000004c34e6 R15: 00007f711677e6d4 22:26:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5}, @sadb_spirange={0x2, 0x10, 0x4d3}]}, 0x50}}, 0x0) 22:26:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x0, 0xfffd}, 0x8) 22:26:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0x0], @random="8fb3f6563259", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast2, @ipv4={[], [], @multicast2}, [@routing], "1876f17af8480b4eab9dc1233a5afe80f83f6c04f3604f8f7ea6b7b446422acb"}}}}}}}, 0x0) [ 1183.173752][ C0] sd 0:0:1:0: [sg0] tag#1302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1183.184473][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB: Test Unit Ready [ 1183.191256][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.201149][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.211049][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.221059][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.230941][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.240824][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.250714][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.260595][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.270490][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.280402][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.290316][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.300191][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1183.310063][ C0] sd 0:0:1:0: [sg0] tag#1302 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0x0], @random="8fb3f6563259", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast2, @ipv4={[], [], @multicast2}, [@routing], "1876f17af8480b4eab9dc1233a5afe80f83f6c04f3604f8f7ea6b7b446422acb"}}}}}}}, 0x0) 22:26:26 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="9cabbf0400cbb140419b80008100501d0806c91238e8a8ac96b3ee5460e3c9eb8f44271e74d20402a5284799e648", 0x2e}], 0x1}, 0x0) 22:26:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:26:26 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 22:26:26 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0xc) 22:26:26 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93"], 0xf0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) fchmodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x2) sendfile(r6, r5, 0x0, 0x20000000000000d8) 22:26:27 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="9cabbf0400cbb140419b80008100501d0806c91238e8a8ac96b3ee5460e3c9eb8f44271e74d20402a5284799e648", 0x2e}], 0x1}, 0x0) 22:26:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0x0], @random="8fb3f6563259", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast2, @ipv4={[], [], @multicast2}, [@routing], "1876f17af8480b4eab9dc1233a5afe80f83f6c04f3604f8f7ea6b7b446422acb"}}}}}}}, 0x0) 22:26:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) [ 1184.130917][ C0] sd 0:0:1:0: [sg0] tag#1303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1184.141632][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB: Test Unit Ready [ 1184.148298][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.158610][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.169195][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.179144][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.189417][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.199326][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.209278][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.219217][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:27 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r0, 0x2a, 0x0) 22:26:27 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfeffff00000000, &(0x7f00000001c0)="83"}) [ 1184.229219][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.239121][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.249150][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.259050][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.269069][ C0] sd 0:0:1:0: [sg0] tag#1303 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0x0], @random="8fb3f6563259", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x58, 0x3a, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7c, {0x0, 0x6, "7f112d", 0x8001, 0x29, 0x0, @mcast2, @ipv4={[], [], @multicast2}, [@routing], "1876f17af8480b4eab9dc1233a5afe80f83f6c04f3604f8f7ea6b7b446422acb"}}}}}}}, 0x0) 22:26:27 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x15, &(0x7f0000000000), 0x20a154cc) [ 1184.560401][ T3298] binder: 3297:3298 ioctl c0306201 20000200 returned -14 [ 1184.590715][ T3301] binder: 3297:3301 ioctl c0306201 20000200 returned -14 22:26:27 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfeffff00000000, &(0x7f00000001c0)="83"}) 22:26:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r4, r2) io_submit(r3, 0x190ada4d, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x48c}]) 22:26:28 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfeffff00000000, &(0x7f00000001c0)="83"}) [ 1184.956338][ T3310] binder: 3309:3310 ioctl c0306201 20000200 returned -14 22:26:28 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 22:26:28 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="9cabbf0400cbb140419b80008100501d0806c91238e8a8ac96b3ee5460e3c9eb8f44271e74d20402a5284799e648", 0x2e}], 0x1}, 0x0) 22:26:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x3c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8e89a78b540bcc844a60d123b52f9501"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x387, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 22:26:28 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x155) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, 0x0, 0x0, 0x8000000}, 0x10, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES64=r3, @ANYRES64=0x0], 0x80}}, 0x0) 22:26:28 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfeffff00000000, &(0x7f00000001c0)="83"}) [ 1185.173951][ T3318] binder: 3316:3318 ioctl c0306201 20000200 returned -14 [ 1185.240071][ T3327] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.4'. 22:26:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) connect(r0, &(0x7f0000000140)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000b3fb00000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) [ 1185.323091][ T3331] binder: 3330:3331 ioctl c0306201 20000200 returned -14 [ 1185.353424][ C1] sd 0:0:1:0: [sg0] tag#1304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1185.364073][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB: Test Unit Ready [ 1185.364808][ T3334] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1185.370917][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.371028][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.371134][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.410000][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x1, 0x0, [{0xe1}]}) [ 1185.419900][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.429876][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.439802][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.449776][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.459795][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:28 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="9cabbf0400cbb140419b80008100501d0806c91238e8a8ac96b3ee5460e3c9eb8f44271e74d20402a5284799e648", 0x2e}], 0x1}, 0x0) 22:26:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffbfc, 0x0, 0x1a, 0x0, 0x64}}) [ 1185.469719][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.480454][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.490372][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1185.500641][ C1] sd 0:0:1:0: [sg0] tag#1304 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009040800000000000000050000000008000f00fd000000", 0x24) [ 1185.990413][ T3363] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1186.007808][ T3363] device 0 entered promiscuous mode 22:26:28 executing program 0: ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000400)={"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"}) request_key(0x0, 0x0, &(0x7f00000000c0)='/dev/kvm\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 22:26:28 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) 22:26:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad24180648c6394fb0124fc0012000b400c000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0) 22:26:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009040800000000000000050000000008000f00fd000000", 0x24) 22:26:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x1, 0x0, [{0xe1}]}) 22:26:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009040800000000000000050000000008000f00fd000000", 0x24) 22:26:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xe}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 22:26:29 executing program 3: unshare(0x20600) r0 = open(&(0x7f0000000000)='.\x00', 0xa00820, 0x0) flock(r0, 0x0) 22:26:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009040800000000000000050000000008000f00fd000000", 0x24) 22:26:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x1, 0x0, [{0xe1}]}) 22:26:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a7a9"}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x31f) 22:26:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x2c}, {0x6, 0x0, 0x0, 0x50000}]}) 22:26:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5, 0x1, "aa"}]}]}, 0x20}}, 0x0) [ 1186.635008][ T3388] xt_CT: You must specify a L4 protocol and not use inversions on it 22:26:29 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 22:26:29 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 22:26:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x1, 0x0, [{0xe1}]}) [ 1186.942714][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1187.017382][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:26:30 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x3e4fb339bc18385d) close(r0) 22:26:30 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x9001, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000}) 22:26:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa14617560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e000000000765387245d75ee8f8acfacc1c5e1520e3ef44c279a48a6dd1477bc12fd514b4fe80812d274014ae40b8ae4f2a88e2fbea7b1f488505ddd46e9930a938817fd7299f385a9c592f5ba5489ebf62c73686ad516af6c29eaa55ff95c26c14f1309a94895a81276bc1ca19499cb6e0d1ade8f98937b6251497aaf8cfeccdc3b75bfdb0ec6a808a1a4ed716acdc98963f6ae26bf6ae2a0816a714b685eb28292e638f9c9e792628eb399db24e08c672d5510ca3fbc7953fd195b54b908bb93040"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000001c0)) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x8, 0x0, 0x6}}) 22:26:30 executing program 2: r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="1ea93642b021d6afd0880aa295db86bbfb4651d254acdd50532d2630", 0x1c}], 0x155}}], 0x400000000000112, 0x0) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/2, 0x2}}], 0x1, 0x0, 0x0) 22:26:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x4) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) chmod(&(0x7f0000000080)='./file0\x00', 0x43) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="040006000000006608000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="10000200000000002000050000000000"], 0x5c, 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 22:26:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4073, 0xfe9}], 0x1, 0x0, 0x0, 0x1f4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/63, 0x3f}, 0x7fff}], 0x2, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x41801) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 22:26:30 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x36b0ef67fa218ed6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924926c0, 0x0) [ 1187.474572][ C1] sd 0:0:1:0: [sg0] tag#1316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1187.485261][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB: Test Unit Ready [ 1187.492083][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.502013][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.512134][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.522196][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.532142][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.542373][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.552273][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.562270][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.572163][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.582100][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.592016][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.601945][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1187.612517][ C1] sd 0:0:1:0: [sg0] tag#1316 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1187.640035][ T3422] input: syz0 as /devices/virtual/input/input51 22:26:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="db", 0xfffffdd8}], 0x1) 22:26:30 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x9001, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000}) 22:26:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa14617560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e000000000765387245d75ee8f8acfacc1c5e1520e3ef44c279a48a6dd1477bc12fd514b4fe80812d274014ae40b8ae4f2a88e2fbea7b1f488505ddd46e9930a938817fd7299f385a9c592f5ba5489ebf62c73686ad516af6c29eaa55ff95c26c14f1309a94895a81276bc1ca19499cb6e0d1ade8f98937b6251497aaf8cfeccdc3b75bfdb0ec6a808a1a4ed716acdc98963f6ae26bf6ae2a0816a714b685eb28292e638f9c9e792628eb399db24e08c672d5510ca3fbc7953fd195b54b908bb93040"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000001c0)) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x8, 0x0, 0x6}}) 22:26:31 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x11c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1188.104295][ C1] sd 0:0:1:0: [sg0] tag#1317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1188.115034][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB: Test Unit Ready [ 1188.121803][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.131718][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.141649][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.151544][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.161485][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.171404][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.181334][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.191244][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)) [ 1188.201142][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.211053][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.220984][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.230894][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.240763][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1188.267010][ T3449] input: syz0 as /devices/virtual/input/input54 [ 1188.296696][ T3453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:26:31 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x9001, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000}) [ 1188.334364][ T9399] tipc: Subscription rejected, illegal request [ 1188.454483][ T3453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:26:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) 22:26:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000001c0)) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x8, 0x0, 0x6}}) 22:26:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0fc0ef43ff3051a2"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:26:31 executing program 1: pipe(&(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) eventfd2(0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:26:31 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x9001, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000}) [ 1188.884332][ C1] sd 0:0:1:0: [sg0] tag#1318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1188.895389][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB: Test Unit Ready [ 1188.902228][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.912483][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.922459][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.932379][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.942454][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.952376][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.962284][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.972395][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.982428][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1188.992443][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.002374][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.012308][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.022237][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:32 executing program 0: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17) [ 1189.060015][ T3487] input: syz0 as /devices/virtual/input/input55 22:26:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) [ 1189.099110][ T3492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:26:32 executing program 0: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000800)=']', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001900)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="b6", 0x34000}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f00000007c0)='.', 0x1}], 0x1}}], 0x2, 0x0) 22:26:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = epoll_create1(0x0) r2 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x2, r2, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c02200065aaaad790ab4cd8ba14000000000000000000", @ANYRES16=r6, @ANYBLOB="10002bbd700005002f000001000008003b0001000000050038000000005108003a3e0000000005003800000000000800225f3a0003000000d00ef556d4e729411afd16af2933b5a27e0b0be8"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010e26bd7000fddbdf250f00000008003900ffff000008003b004000003b000300000008002b00030000000800310008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000314ec02ce616327f1e13b263c8052044fb2588f624f2371e73a3e52cfd0bbe22a183fb9899fd7611c848e75f6ac7bcfa229668122a6a3e8b2a5b650b2652594c7fb49f05f9bbec2847ea6fd64b34bbb959b0b7c1c3df", @ANYRES16=r6, @ANYBLOB="00022abd7000fddbdf2511000000060028000000000008003a000004000008003900010000000500370000000000"], 0x34}}, 0x40080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000825bd7000ffdbdf250b00000005002a000000000005003800010000000500350008000000050035002c0000000a000900aaaab3aaaa0f0000050033000100000005002f0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0xf81, 0x0, 0x0, 0x9, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x37) 22:26:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) 22:26:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000001c0)) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x50, 0x8, 0x0, 0x6}}) 22:26:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x5f) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r1, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c12e3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4) 22:26:32 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) [ 1189.654970][ C0] sd 0:0:1:0: [sg0] tag#1319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1189.665978][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB: Test Unit Ready [ 1189.672795][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.682726][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.692759][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.702897][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.713127][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.723093][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.733054][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.743126][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.753187][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.763189][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.773149][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.783301][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1189.794379][ C0] sd 0:0:1:0: [sg0] tag#1319 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x2, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0xb4}}, 0x0) [ 1189.819032][ T3519] input: syz0 as /devices/virtual/input/input56 22:26:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 22:26:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) 22:26:33 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 22:26:33 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xf, &(0x7f0000000080)={0x0, 0x0, 0x2}) 22:26:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 22:26:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) [ 1190.536925][ T3547] IPVS: ftp: loaded support on port[0] = 21 22:26:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000400)) 22:26:34 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x20400) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045113, &(0x7f0000000000)) 22:26:34 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 22:26:34 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008f00)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 22:26:34 executing program 0: clone(0x21002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x168, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 22:26:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000400)) 22:26:34 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 22:26:34 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0xc9) [ 1191.716134][ T3602] xt_hashlimit: Unknown mode mask 168, kernel too old? [ 1192.324312][ T3547] IPVS: ftp: loaded support on port[0] = 21 [ 1193.320871][T15161] tipc: TX() has been purged, node left! 22:26:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 22:26:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f0000000080)) 22:26:36 executing program 1: syz_emit_ethernet(0xa6e, &(0x7f0000000d40)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa38, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78c000005dc790853d5dea6b259b8e3cd2c8038336823493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a2a1328c5f93037dc1435c11b3000000008405af736b41e5a8"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f381922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1000000"}, {0x0, 0x84, "062bf7b5e0f2dbbdc849b90d4e80a0e3f7af088060d01a1cfcfad88ef4512c6ef5c0ead4b9cc87484b106a060a9899d50f595204418f51e914c88c29078a5457de6a262cadf02b071d88e61703f037caded0b315701274012fa532ddd69499074e1a2df196e0afcffda08fb3d82ab8160253a47d3efc3d7cead55c28610ae20f69aaced0a1a6ce815344cf8d0bc8a0dfcdd1e8cd7242601777ec653c2d4b704397dcb1350982afd017eaa630c840d71589499fd68239ae0c0aa2fc9b949d1a716d40a24f078e92e8c268ff726290944b5f3a3bea9559f2d2a51405fba224411ecc49544dea47917a98bf79c3bfeed70429abf70a52ecbda21c9bf0f6a70cd2c2c887391e4095ad22b437c60abf829447b47bd231ca2a98d9da7519a4bd28e803fa000fafc0dc453ed56cdf4356d7abcfec4eed0b94a4f78ce44a7177c6684026ba4f26a17e52e326c8bb7be5e2ea5780d7169d8f4ff62cb2b223f1d6221f62e0ee0244d86042560edd36853c464b23be536c65b87cd5ea60932ed90607b369ed2017f645afcb5cd07f6896a08473bd5dea2bfb52ac501a39c338ede985aa4a7755db876cbe4d944f3cce0079d2ad9ba8d17f01a614052aadbd4af0fd282f594dc4530ee49b6c9ae6d5d80a073e678594be2e2f0869baa2a58dd2d0f6a995fb706c4d1b618d57da1c2d8f55611f746105a947b4f6bb74dbdbffb1b3c1f2316f6a28a07f0145b1bf8345b6aa4e9d5a819497856792121219ea151c1f8e2f86356439bc5b87fe4cad68b6afa08687e6e751803865165eac0c34bdddae1bbe52f55d08cc4a0865f8df372635e8a26ac4ac9716a124ac4e83349f17b612e2b1893b5eaccecc7d812bb4f4fc6b313f57c2035a90f782a4a97b5f5309b6c5798d72b9187f3d411e84041e3671fe35e39fa1887846721c38d501b471990b919d2ad9ca9bc71157a843d75838c1aa4ff0dabd74284709f1f87f324ec4f56eacd70e6bb5e9c3ff719786c4d4284e4cfdc828e0465ca168d04de1d8e884bc31006c112176ef3f8cffd1ae383cf5ea5d60dbbf4a74c942541b8ea4ed6e510893cb83ac90b7f9e15b7dbe796b45f3c5a5e27b01ca46f9b3c876013af4bec92641513fecb7ccefd439d56e21a4fadc52148e821ec4d1949f75a7f0e0f11f537dbbab42abc804b49bd485505def27a5f437a06d0a96571e0800d69df5229bfcd3162b90af3d87751f50c06541fba6e8d6ddc0d16546d0efda7eff96a819048e6a1510ef673fc6fd5a9fa64280eeb935bfe8f91b503941a5676c48d6c37c900281e275fc4cdfc843c86c149a8bb8287d2c14f174888259a1b264a0a79f708a0a5bb38071103c9e632a8be1523ad6402cfb7aabf222312a085628b7ed6d712567562753057b91cd677498ae80183ea868ed52d285dfce7e611a3adfab21c972002dd747e58609c1caa5cac1d9dc393dab20090c9e3147388978e20192c3a319023eb5a20bab5b180b4dc2"}, {0x0, 0x1, "b20360609ee68487"}, {}, {0x0, 0x9c, "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"}]}}}}}}, 0x0) 22:26:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfffffffffffffffd}) 22:26:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000400)) 22:26:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x4000) 22:26:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) clone(0x400dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) [ 1194.112596][ T3657] IPVS: ftp: loaded support on port[0] = 21 22:26:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 22:26:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000400)) [ 1194.364344][ T3681] sctp: [Deprecated]: syz-executor.4 (pid 3681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1194.364344][ T3681] Use struct sctp_sack_info instead 22:26:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f0000000080)) [ 1194.414805][ T3684] sctp: [Deprecated]: syz-executor.4 (pid 3684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1194.414805][ T3684] Use struct sctp_sack_info instead 22:26:37 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup2(r0, r1) 22:26:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa4}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 22:26:39 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 22:26:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f0000000080)) 22:26:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x801, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) 22:26:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 22:26:39 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @remote}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:26:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa4}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 1196.580317][ T3729] IPVS: ftp: loaded support on port[0] = 21 22:26:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f0000000080)) 22:26:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x801, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) 22:26:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa4}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 22:26:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x84}, {0x6, 0x0, 0x0, 0x50000}]}) [ 1196.871717][T15161] tipc: TX() has been purged, node left! [ 1196.895685][T15161] tipc: TX() has been purged, node left! 22:26:40 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @remote}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:26:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) [ 1197.495289][ T3776] IPVS: ftp: loaded support on port[0] = 21 22:26:42 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 22:26:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x801, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) 22:26:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa4}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 22:26:42 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @remote}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:26:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x84}, {0x6, 0x0, 0x0, 0x50000}]}) [ 1199.001116][ T3776] IPVS: ftp: loaded support on port[0] = 21 [ 1199.314793][ T3828] IPVS: ftp: loaded support on port[0] = 21 22:26:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x84}, {0x6, 0x0, 0x0, 0x50000}]}) 22:26:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x801, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) 22:26:42 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @remote}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:26:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7) 22:26:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x84}, {0x6, 0x0, 0x0, 0x50000}]}) 22:26:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 22:26:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xfff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) [ 1201.438778][T15161] tipc: TX() has been purged, node left! [ 1201.612302][T15161] tipc: TX() has been purged, node left! 22:26:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6c, 0x65}, [@call={0x47}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 22:26:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 22:26:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) 22:26:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7) 22:26:44 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000005, 0x12, r0, 0x0) r1 = socket(0x22, 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000140)) 22:26:44 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000073c0)=@deltfilter={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2, 0x8}}}, 0x24}, 0x8}, 0x0) 22:26:45 executing program 4: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x100000001, 0x20, 0x0) 22:26:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 22:26:45 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000005, 0x12, r0, 0x0) r1 = socket(0x22, 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000140)) 22:26:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb0, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x28, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}]}, 0xb0}}, 0x0) 22:26:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 22:26:45 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000005, 0x12, r0, 0x0) r1 = socket(0x22, 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000140)) 22:26:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') lseek(r0, 0x7, 0x0) 22:26:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7) 22:26:46 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000380)=""/73, 0x49}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f0000000540)=""/15, 0xf}, {&(0x7f0000000580)=""/69, 0x45}, {&(0x7f0000000600)=""/11, 0xb}, {&(0x7f00000010c0)=""/233, 0xe9}], 0x9}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000008c0)=""/231, 0xe7}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x8000040000000088) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000) 22:26:46 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 22:26:46 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000005, 0x12, r0, 0x0) r1 = socket(0x22, 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000140)) 22:26:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="4c9a", 0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:26:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 22:26:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe33f, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:26:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc00c5512, &(0x7f0000000000)) 22:26:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e7864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 22:26:47 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc038563b, &(0x7f00000000c0)={0x0, 0xffffffff}) 22:26:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/76, &(0x7f00000003c0), &(0x7f0000000300), 0xef, r2}, 0x38) 22:26:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc00c5512, &(0x7f0000000000)) 22:26:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7) 22:26:47 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @remote}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) 22:26:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/76, &(0x7f00000003c0), &(0x7f0000000300), 0xef, r2}, 0x38) 22:26:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8910, 0x400200) 22:26:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc00c5512, &(0x7f0000000000)) 22:26:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:26:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc00c5512, &(0x7f0000000000)) 22:26:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/76, &(0x7f00000003c0), &(0x7f0000000300), 0xef, r2}, 0x38) 22:26:48 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:26:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) read(r3, &(0x7f0000000280)=""/113, 0x71) 22:26:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:26:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:26:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x1}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0xac141424, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1}}, 0x48) 22:26:49 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 22:26:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/76, &(0x7f00000003c0), &(0x7f0000000300), 0xef, r2}, 0x38) 22:26:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:26:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x1}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0xac141424, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1}}, 0x48) 22:26:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:26:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="a1", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0xfffffff8}, 0x10) listen(r0, 0x7) accept(r0, &(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 22:26:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:26:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x1}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0xac141424, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1}}, 0x48) 22:26:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:26:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x703}, 0x14}}, 0x0) readv(r0, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/100, 0x64}], 0x1) 22:26:49 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="1000040000100000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1}}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:26:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x180, 0x10, 0x301, 0x0, 0x0, {{@in=@multicast1}, {@in6=@empty, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x2, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x180}}, 0x0) 22:26:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x1}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0xac141424, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1}}, 0x48) [ 1206.634635][ T4063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:26:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1206.807861][ T4075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:26:49 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000002c0)='X', 0xbc, 0xfffffffffffffffe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r3, r3}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={'poly1305-generic\x00'}}) 22:26:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:26:50 executing program 2: unshare(0x2000400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0xc0884113, 0x0) 22:26:50 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x300, 0x300, 0x230, 0x0, 0x230, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@remote, 0x40, 0x31}}}, {{@ipv6={@dev, @ipv4, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@mcast2, @local, [], [], 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 22:26:50 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xfffffffffffffe00}, 0x800, 0x0, 0x0, 0x0, 0x1000000, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1af) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000056000/0x18000)=nil, 0x0, 0x4b, 0xb, 0x0, 0xffffffffffffffa6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000780)={{0x3, 0x3, 0x8, 0x2, 0x9a46}, 0xc, 0x38d8, 0xfff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000004c0)={r8}, &(0x7f00000003c0)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300290800000000000000000400000405000b0000000000"], 0x1c}, 0x1, 0x60}, 0x0) 22:26:50 executing program 0: socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) write$sndseq(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:26:50 executing program 5: syz_emit_ethernet(0xd6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000180)={'macsec0\x00', {0x2, 0x4e23, @remote}}) r1 = dup(r0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r3, 0x0, 0x2, 0xfffffffffffffffe, 0x3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001640)=@assoc_value={0x0, 0x7}, 0x8) close(r2) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) 22:26:50 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x300, 0x300, 0x230, 0x0, 0x230, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@remote, 0x40, 0x31}}}, {{@ipv6={@dev, @ipv4, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@mcast2, @local, [], [], 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) [ 1207.279214][ T4090] ip6t_srh: unknown srh invflags 4800 22:26:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1207.368282][ C0] sd 0:0:1:0: [sg0] tag#1323 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1207.379294][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB: Test Unit Ready [ 1207.385951][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.395950][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.405902][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.415860][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.425755][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.435666][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.445572][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.455597][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.465517][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.475423][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.485315][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.495157][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.505019][ C0] sd 0:0:1:0: [sg0] tag#1323 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:50 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x300, 0x300, 0x230, 0x0, 0x230, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@remote, 0x40, 0x31}}}, {{@ipv6={@dev, @ipv4, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@mcast2, @local, [], [], 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 22:26:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000001d4, 0x0) [ 1207.546145][ T4105] ip6t_srh: unknown srh invflags 4800 22:26:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, 0x1, 0x4, 0x9, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}]}, 0x30}}, 0x0) [ 1207.876476][ C0] sd 0:0:1:0: [sg0] tag#1331 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1207.887254][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB: Test Unit Ready [ 1207.894152][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.904063][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.913963][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.923964][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.933867][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.943745][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.953640][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.963554][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.973452][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.983377][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1207.994052][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.003964][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.013851][ C0] sd 0:0:1:0: [sg0] tag#1331 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:26:51 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xfffffffffffffe00}, 0x800, 0x0, 0x0, 0x0, 0x1000000, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1af) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000056000/0x18000)=nil, 0x0, 0x4b, 0xb, 0x0, 0xffffffffffffffa6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000780)={{0x3, 0x3, 0x8, 0x2, 0x9a46}, 0xc, 0x38d8, 0xfff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000004c0)={r8}, &(0x7f00000003c0)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300290800000000000000000400000405000b0000000000"], 0x1c}, 0x1, 0x60}, 0x0) 22:26:51 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xfffffffffffffe00}, 0x800, 0x0, 0x0, 0x0, 0x1000000, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1af) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000056000/0x18000)=nil, 0x0, 0x4b, 0xb, 0x0, 0xffffffffffffffa6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000780)={{0x3, 0x3, 0x8, 0x2, 0x9a46}, 0xc, 0x38d8, 0xfff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000004c0)={r8}, &(0x7f00000003c0)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300290800000000000000000400000405000b0000000000"], 0x1c}, 0x1, 0x60}, 0x0) [ 1208.375815][ C0] sd 0:0:1:0: [sg0] tag#1288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.386524][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB: Test Unit Ready [ 1208.393371][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.403277][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.413232][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.420620][ T4151] ip6t_srh: unknown srh invflags 4800 [ 1208.423282][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.438354][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.448373][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.458266][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:51 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x300, 0x300, 0x230, 0x0, 0x230, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@remote, 0x40, 0x31}}}, {{@ipv6={@dev, @ipv4, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@mcast2, @local, [], [], 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) [ 1208.468196][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.478112][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.488042][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.498002][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.507914][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.517914][ C0] sd 0:0:1:0: [sg0] tag#1288 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:51 executing program 5: unshare(0x2a000400) r0 = mq_open(&(0x7f000084dff0)='!sel\x06\xfc|\xbf\rinux', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0xff7f, 0x0, 0x0) [ 1208.718864][ T4173] ip6t_srh: unknown srh invflags 4800 [ 1208.725038][ C0] sd 0:0:1:0: [sg0] tag#1297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.735880][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB: Test Unit Ready [ 1208.742728][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.752745][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.762790][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.772812][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.783528][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.793570][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.803638][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.813651][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.823615][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.823757][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.823906][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.824046][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.824182][ C0] sd 0:0:1:0: [sg0] tag#1297 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$alg(r0, 0x0, 0x0) r4 = dup(r3) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/188, 0xbc}], 0x1}}], 0x2, 0x0, 0x0) 22:26:52 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xfffffffffffffe00}, 0x800, 0x0, 0x0, 0x0, 0x1000000, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e35bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994cc008dd3deaafaab51144c1ef00f00001f5e73ff040000000000000000000000ff0000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643dbe805897f3b1304780753de6634bf57fbe09a7eb84cae7f000000886871080d1588bb30abcb"], 0x1af) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000056000/0x18000)=nil, 0x0, 0x4b, 0xb, 0x0, 0xffffffffffffffa6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000780)={{0x3, 0x3, 0x8, 0x2, 0x9a46}, 0xc, 0x38d8, 0xfff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000004c0)={r8}, &(0x7f00000003c0)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300290800000000000000000400000405000b0000000000"], 0x1c}, 0x1, 0x60}, 0x0) 22:26:52 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) [ 1209.029379][T15161] tipc: TX() has been purged, node left! [ 1209.093432][ C0] sd 0:0:1:0: [sg0] tag#1317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1209.104281][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB: Test Unit Ready [ 1209.111099][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.121071][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.131010][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.140996][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.151112][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.161076][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.171012][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.180935][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.190969][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.201028][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.210976][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.220912][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.230849][ C0] sd 0:0:1:0: [sg0] tag#1317 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1209.251665][ T4194] NFS: mount program didn't pass any mount data [ 1209.281141][ T4196] NFS: mount program didn't pass any mount data 22:26:52 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 22:26:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x0, {0x2, 0x0, @multicast1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @broadcast}, 0x5, {0x2, 0x0, @remote}}) 22:26:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28}, 0x28) 22:26:52 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xfffffffffffffe00}, 0x800, 0x0, 0x0, 0x0, 0x1000000, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e35bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994cc008dd3deaafaab51144c1ef00f00001f5e73ff040000000000000000000000ff0000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643dbe805897f3b1304780753de6634bf57fbe09a7eb84cae7f000000886871080d1588bb30abcb"], 0x1af) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000056000/0x18000)=nil, 0x0, 0x4b, 0xb, 0x0, 0xffffffffffffffa6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000780)={{0x3, 0x3, 0x8, 0x2, 0x9a46}, 0xc, 0x38d8, 0xfff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000004c0)={r8}, &(0x7f00000003c0)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300290800000000000000000400000405000b0000000000"], 0x1c}, 0x1, 0x60}, 0x0) 22:26:52 executing program 5: unshare(0x2a000400) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/3\x00') r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) select(0x40, &(0x7f00000002c0)={0x85}, 0x0, 0x0, 0x0) [ 1209.572069][T15161] tipc: TX() has been purged, node left! [ 1209.592201][ T4213] NFS: mount program didn't pass any mount data [ 1209.695280][ C0] sd 0:0:1:0: [sg0] tag#1330 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1209.705967][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB: Test Unit Ready [ 1209.712780][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.722753][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.732757][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.742940][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.752885][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.762857][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.772804][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.782753][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.792685][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.802735][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.812693][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.822674][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.832623][ C0] sd 0:0:1:0: [sg0] tag#1330 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:53 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xfffffffffffffe00}, 0x800, 0x0, 0x0, 0x0, 0x1000000, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1af) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000056000/0x18000)=nil, 0x0, 0x4b, 0xb, 0x0, 0xffffffffffffffa6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000780)={{0x3, 0x3, 0x8, 0x2, 0x9a46}, 0xc, 0x38d8, 0xfff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000004c0)={r8}, &(0x7f00000003c0)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300290800000000000000000400000405000b0000000000"], 0x1c}, 0x1, 0x60}, 0x0) 22:26:53 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 22:26:53 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="5b31bf0400cbb140419b80008100501d0806", 0x12}], 0x1}, 0x0) 22:26:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 22:26:53 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) [ 1210.227765][ T4242] NFS: mount program didn't pass any mount data 22:26:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r2, &(0x7f00000000c0), 0x8) splice(r0, 0x0, r3, 0x0, 0x408ec3, 0x0) write$binfmt_elf64(r1, &(0x7f0000001500)=ANY=[@ANYRES64=0x0], 0x8) [ 1210.392308][ C0] sd 0:0:1:0: [sg0] tag#1335 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1210.403179][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB: Test Unit Ready [ 1210.407393][ T4249] NFS: mount program didn't pass any mount data [ 1210.409987][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.410104][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.436093][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.446022][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.455972][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.465968][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.475908][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.485832][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.495806][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.505782][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.515707][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.525663][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.535624][ C0] sd 0:0:1:0: [sg0] tag#1335 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:53 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = eventfd2(0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000400)="930f5bab52e14078", 0x8}, {&(0x7f0000000280)="f99e4ca03a1c39a1", 0x8}], 0x2) splice(r1, 0x0, r0, 0x0, 0x7fff, 0x0) 22:26:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:26:53 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif=@at={0x25, 0x8}, 0x80, 0x0}, 0x0) 22:26:54 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x8}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) 22:26:54 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f908, 0x68, [], @p_u8=0x0}}) 22:26:54 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xfffffffffffffe00}, 0x800, 0x0, 0x0, 0x0, 0x1000000, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1af) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000500), &(0x7f0000000540)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000056000/0x18000)=nil, 0x0, 0x4b, 0xb, 0x0, 0xffffffffffffffa6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000780)={{0x3, 0x3, 0x8, 0x2, 0x9a46}, 0xc, 0x38d8, 0xfff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000004c0)={r8}, &(0x7f00000003c0)=0x8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300290800000000000000000400000405000b0000000000"], 0x1c}, 0x1, 0x60}, 0x0) 22:26:54 executing program 2: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x1c) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) dup2(r0, r2) read(r2, &(0x7f0000000780)=""/90, 0x5a) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:26:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 1211.266445][ C0] sd 0:0:1:0: [sg0] tag#1336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1211.277362][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB: Test Unit Ready [ 1211.284191][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.294125][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.304067][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.314848][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.324800][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.334782][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.344736][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.354682][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:26:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 1211.364642][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.379166][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.389090][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.399037][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1211.409005][ C0] sd 0:0:1:0: [sg0] tag#1336 CDB[c0]: 00 00 00 00 00 00 00 00 22:26:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = dup(r4) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = dup(r6) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1002000000013) 22:26:54 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 22:26:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000340)={@ptr={0x77682a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/223, 0xdf}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f20}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}, 0x2000}], 0x0, 0x73b000, 0x0}) 22:26:55 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:26:55 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="1d", 0x1}], 0x1) [ 1212.040788][ T4331] binder: BINDER_SET_CONTEXT_MGR already set [ 1212.046946][ T4331] binder: 4328:4331 ioctl 40046207 0 returned -16 22:26:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:26:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd3, &(0x7f0000000140)="c4fe910c6786cec96ddb5322addee07b02000000cacd891969b718323514dca7712c225da438f9dbd0fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb9693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b07817bb986234093f2623193c8ff3177fc84e28d36d47e7f970ed174ce21c760da77598e5821b74c389f3fa7406ec26cd82de07f4a208f3e17e1a5cf9bb1f24ad4865117b4163f4ea05c949ce5c7b2738f1bde8a2150f958d0de89263a99e47"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:26:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = dup(r4) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = dup(r6) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1002000000013) 22:26:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001780)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffd, 0x2, {0x1, @raw_data="7c8601da29ef0a0b76fb6e417e3e1258adf963d232308a9feddfc7ad234e83a527e9e414899507f63032545ffd25b385a3f299a8f2ce0f3b529d318c7feec75b54d0b67156316ecbd7b6d5c36313434e47ef7b2588c1425aadf73a3d2a87d3ed1fa6928d0f8b01e359cf1b69bfa933c0a2dc5893f05b0a5872b15d5fd638bd93d440cdf1d75bfe88f3d5c96de19bd336081055a9fb8eded63dba89d4f14e401aa68910d3c0cb85e3918a656ffa5ab8d942b420ed0feb9edd20e1d3b7dd1030a637433675b809a658"}}) 22:26:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004ff4)={0x2000001c}) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 22:26:55 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:26:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:26:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = dup(r4) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = dup(r6) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1002000000013) 22:26:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) 22:26:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={0x1c, 0x14, 0x101, 0x0, 0x0, {0x18}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 22:26:56 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) 22:26:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = dup(r4) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = dup(r6) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1002000000013) 22:26:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/220, 0xdc}], 0x1, 0x8) 22:26:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd3, &(0x7f0000000140)="c4fe910c6786cec96ddb5322addee07b02000000cacd891969b718323514dca7712c225da438f9dbd0fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb9693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b07817bb986234093f2623193c8ff3177fc84e28d36d47e7f970ed174ce21c760da77598e5821b74c389f3fa7406ec26cd82de07f4a208f3e17e1a5cf9bb1f24ad4865117b4163f4ea05c949ce5c7b2738f1bde8a2150f958d0de89263a99e47"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:26:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:26:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) 22:26:58 executing program 0: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @empty}, @in, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @local}, @in6={0xa, 0x0, 0x0, @mcast2}, @in6={0xa, 0x0, 0x0, @local}], 0x51e045de5b35c390) 22:26:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) 22:26:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x3e9, 0x0, 0x0, 0x0, {0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x34}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1215.612407][ T4439] input: syz1 as /devices/virtual/input/input57 [ 1215.807919][ T4447] input: syz1 as /devices/virtual/input/input58 22:26:58 executing program 0: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:26:59 executing program 4: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4c) 22:26:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) 22:26:59 executing program 3: write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x6}, 0x10) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101002, 0x0) pwritev(r0, &(0x7f0000000000), 0x1, 0x0) 22:26:59 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x2041) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 22:26:59 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x60, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0xc}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 22:26:59 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x18}}, 0x0) [ 1216.638234][ T4497] xt_addrtype: ipv6 does not support BROADCAST matching 22:27:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd3, &(0x7f0000000140)="c4fe910c6786cec96ddb5322addee07b02000000cacd891969b718323514dca7712c225da438f9dbd0fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb9693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b07817bb986234093f2623193c8ff3177fc84e28d36d47e7f970ed174ce21c760da77598e5821b74c389f3fa7406ec26cd82de07f4a208f3e17e1a5cf9bb1f24ad4865117b4163f4ea05c949ce5c7b2738f1bde8a2150f958d0de89263a99e47"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:27:01 executing program 4: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4c) 22:27:01 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x89b1, &(0x7f0000000000)=':') 22:27:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x60, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0xc}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 22:27:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) 22:27:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a060103000000000000000000000000040008800900020073797a32000000000500010003000000"], 0x2c}}, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 22:27:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8004005) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540b, 0x0) 22:27:02 executing program 4: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4c) 22:27:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f00000002c0)) 22:27:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x60, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0xc}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 22:27:02 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x5, 0x10400003) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_open_procfs(0xffffffffffffffff, 0x0) 22:27:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x60, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0xc}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 1219.298968][ T4537] xt_addrtype: ipv6 does not support BROADCAST matching [ 1219.619122][ T4544] xt_addrtype: ipv6 does not support BROADCAST matching 22:27:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd3, &(0x7f0000000140)="c4fe910c6786cec96ddb5322addee07b02000000cacd891969b718323514dca7712c225da438f9dbd0fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb9693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b07817bb986234093f2623193c8ff3177fc84e28d36d47e7f970ed174ce21c760da77598e5821b74c389f3fa7406ec26cd82de07f4a208f3e17e1a5cf9bb1f24ad4865117b4163f4ea05c949ce5c7b2738f1bde8a2150f958d0de89263a99e47"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:27:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/233, 0xe9, 0x0, 0x0, 0x0) 22:27:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8004005) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540b, 0x0) 22:27:04 executing program 4: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4c) 22:27:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="000000000000000004000a000a000100726f7574650000002000020008000100000000000800030040000000040006000800020000000000"], 0x50}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:27:04 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x5, 0x10400003) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_open_procfs(0xffffffffffffffff, 0x0) 22:27:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) fallocate(r0, 0x100000010, 0x0, 0x808001) 22:27:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8004005) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540b, 0x0) 22:27:05 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x5, 0x10400003) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_open_procfs(0xffffffffffffffff, 0x0) 22:27:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x1) pipe(&(0x7f0000000040)) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)='R', 0x1}, {&(0x7f00000002c0)="6fd9f9845e726af3afedab6e97398ba90560db0b6e1dbe1bd0f66e8c700845f4d748da362a2fd3c109492bc153e2e29f5b9e9b98b0c7e9c6c5bb13e87a22a9244972311844a32fecab2f79690f7fbc629e19bae23bc1ed4ab2c9daab76be96b13b815678a74a5b7984ff7788dfbf26043853cb1f7492d74c1f58e4c5", 0x7c}], 0x2, 0x0) 22:27:05 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f09a142259e3390bf809d4e10e", 0x3cd}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}, 0x0) recvmsg$kcm(r1, &(0x7f0000005c40)={&(0x7f00000029c0)=@xdp, 0x80, &(0x7f0000004c00)=[{&(0x7f0000002a40)=""/168, 0xa8}, {0x0, 0xa0022000}], 0x2, &(0x7f0000004c40)=""/4096, 0x1000}, 0x0) 22:27:05 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0xffffffffffffffff, 0x0, 0x10, r3, 0x0) 22:27:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8004005) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540b, 0x0) 22:27:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$FIBMAP(r0, 0x8000451a, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 22:27:05 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 22:27:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @remote={0xac, 0x2}}, @RTA_OIF={0x8, 0x4, r4}]}, 0x2c}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 22:27:06 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)=""/139, 0x8b}], 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa3, 0x0, 0x0, 0x0, 0x60}, 0x2af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000ac0)) dup2(r0, r1) 22:27:06 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/4108, 0x100c}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000002800)=""/4080, 0xff0}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000000)=""/50, 0x32}], 0x5, 0x10400003) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_open_procfs(0xffffffffffffffff, 0x0) 22:27:06 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4109, 0x100d}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) 22:27:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, r0, 0x9669dfe2c2e463bf}, 0x38) 22:27:07 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 22:27:07 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4109, 0x100d}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) 22:27:07 executing program 0: mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x37, 0x0, &(0x7f0000013000)) 22:27:23 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, 0x0, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000200)=[0x7fff, 0x81, 0xfffffffb], 0x3, 0x7, 0x5, 0x2, 0x800, 0x101, 0x0, {0x7, 0x3ff, 0x0, 0x3, 0x4, 0x8, 0x6, 0xff, 0x6, 0x1, 0x401, 0x6, 0x10001, 0x8, "1362754ded9ca54751b2b08a339a9eaf0ac62e2ef5220f6f63a80341953b283e"}}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 22:27:23 executing program 2: r0 = socket(0x15, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000019700)={0x0, 0x0, 0x0}, 0x40012003) 22:27:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 22:27:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={r1, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x2d3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x10, "e7884063f2a871877c25a5f893babf25"}, &(0x7f00000031c0)=0x18) 22:27:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001780)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x20000940, 0x0, 0x0, 0x20000970, 0x20000ade], 0x0, 0x0, &(0x7f0000000940)=[{}, {0xfeffff07}, {0x0, '\x00', 0x1}]}, 0x108) 22:27:23 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4109, 0x100d}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 1240.758872][ C0] sd 0:0:1:0: [sg0] tag#1307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1240.769564][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB: Test Unit Ready [ 1240.776206][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.786154][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.796723][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.806733][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.816651][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.826634][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.836572][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.846502][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.856451][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.866398][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.876326][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.886290][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1240.896148][ C0] sd 0:0:1:0: [sg0] tag#1307 CDB[c0]: 00 00 00 00 00 00 00 00 22:27:24 executing program 2: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ppp1[\x00', &(0x7f0000000280)='\x00', 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='.vboxnet0^keyring,%\x00', &(0x7f0000000480)='selinuxwlan0eth1+md5sum\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000002c0)='-vboxnet0^\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='&em0wlan1-\x00', &(0x7f0000000380)='bdevtrusted\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='bdevtrusted\x00', &(0x7f0000000180)='ppp1[\x00', 0x0) dup3(r1, r0, 0x0) 22:27:24 executing program 0: unshare(0x20400) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200000, 0x0) accept$unix(r0, 0x0, 0x0) 22:27:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 22:27:24 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4109, 0x100d}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) 22:27:24 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$tipc(r0, &(0x7f0000003600)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)=""/208, 0xca}], 0x1, 0x0, 0xfffffffffffffd5e}}, {{0x0, 0x0, 0x0, 0x248, 0x0, 0xfffffffffffffe91}}], 0x2, 0x0, 0x0) 22:27:24 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x2, 0xfec9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000018"], 0x1) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 1241.566481][ C0] sd 0:0:1:0: [sg0] tag#1308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1241.577137][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB: Test Unit Ready [ 1241.583930][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.593794][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.603663][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.613610][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.623486][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.633381][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.643258][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.653171][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.663079][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.672941][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.682817][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.692681][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1241.702537][ C0] sd 0:0:1:0: [sg0] tag#1308 CDB[c0]: 00 00 00 00 00 00 00 00 22:27:24 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, 0x0, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000200)=[0x7fff, 0x81, 0xfffffffb], 0x3, 0x7, 0x5, 0x2, 0x800, 0x101, 0x0, {0x7, 0x3ff, 0x0, 0x3, 0x4, 0x8, 0x6, 0xff, 0x6, 0x1, 0x401, 0x6, 0x10001, 0x8, "1362754ded9ca54751b2b08a339a9eaf0ac62e2ef5220f6f63a80341953b283e"}}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 22:27:24 executing program 2: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ppp1[\x00', &(0x7f0000000280)='\x00', 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='.vboxnet0^keyring,%\x00', &(0x7f0000000480)='selinuxwlan0eth1+md5sum\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000002c0)='-vboxnet0^\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='&em0wlan1-\x00', &(0x7f0000000380)='bdevtrusted\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='bdevtrusted\x00', &(0x7f0000000180)='ppp1[\x00', 0x0) dup3(r1, r0, 0x0) 22:27:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), 0x4) 22:27:24 executing program 1: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) 22:27:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x80000006}]}, 0x10) 22:27:25 executing program 2: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ppp1[\x00', &(0x7f0000000280)='\x00', 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='.vboxnet0^keyring,%\x00', &(0x7f0000000480)='selinuxwlan0eth1+md5sum\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000002c0)='-vboxnet0^\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='&em0wlan1-\x00', &(0x7f0000000380)='bdevtrusted\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='bdevtrusted\x00', &(0x7f0000000180)='ppp1[\x00', 0x0) dup3(r1, r0, 0x0) 22:27:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8d, &(0x7f00000193c0)="f7f258480aa42220e779e70076cc036a2a160500000032a56f7259e480249950f34c6aa172903acab906712ebb70cef20d94de765aa586d65a3d7f022e4c14f1bdd7d464e9ee1470000000002f997905d398eef68310ec46b654cd8f9c032f1078c135c760ca5232f285d288f2fb01819502f5fa6fa2e945e156919190b1df395f3249121933b05884012ce6e5"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 22:27:25 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}], 0x300, 0x2, 0x0) 22:27:25 executing program 1: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000002c00270d00"/19, @ANYRES32=r2, @ANYBLOB="000000000080"], 0x8c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1243.170014][ C1] sd 0:0:1:0: [sg0] tag#1310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1243.180863][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB: Test Unit Ready [ 1243.187512][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.197483][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.207441][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.217438][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.227438][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.237301][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.247187][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.257101][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:27:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}], 0x300, 0x2, 0x0) [ 1243.267014][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.276904][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.286828][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.296771][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.306682][ C1] sd 0:0:1:0: [sg0] tag#1310 CDB[c0]: 00 00 00 00 00 00 00 00 22:27:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000180)=0xb0) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r6 = dup2(r5, r1) dup3(r6, r0, 0x0) [ 1243.367397][ T4773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1243.424006][ T4779] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1243.441592][ T4779] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1243.573558][ T4779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:27:26 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, 0x0, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000200)=[0x7fff, 0x81, 0xfffffffb], 0x3, 0x7, 0x5, 0x2, 0x800, 0x101, 0x0, {0x7, 0x3ff, 0x0, 0x3, 0x4, 0x8, 0x6, 0xff, 0x6, 0x1, 0x401, 0x6, 0x10001, 0x8, "1362754ded9ca54751b2b08a339a9eaf0ac62e2ef5220f6f63a80341953b283e"}}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 1243.633563][ T4779] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1243.691041][ T4779] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1243.891809][ C1] sd 0:0:1:0: [sg0] tag#1311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1243.902499][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB: Test Unit Ready [ 1243.912413][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.922514][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.932473][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.942422][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.952832][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.962809][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.972777][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1243.982773][ C1] sd 0:0:1:0: [sg0] tag#1311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:27:27 executing program 1: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000700)='$\xbbet\t\x00\x00\x00\xec\xfcS\xb2\xcf\n\xb0>\x95\x8f\x16\xb8h\x84\xff\x92\xed8\xe5\xd5\xa1\x19\xff\xff/\xc7\xb2\xa9\xa6\xb3\x92S\xfe\xd4\x890\xc3\x1b\xb8\xaa\xa1\xec\xcb%\xf6sh\xe6\x82\xc3\x1b\x8a\xdb\xa34b\xc5\xc5\x12Nr_\xc2\xe1\xd7\xe42\x10\xf0C\xa0[\x7f\x99Is\x90+\xd2x\x87\xec\x1a\xd1\x03\'\xaa\x90\xe26\xbc6\xecf\xe1/\xe2\xcb8U\xca\xaaIf\xcb\xf9\xaf:^u\xd1b\xd1&\xc3\xfd=\xbd\xf3,wq\f7\x85e\xa8d\xdfx\xab\x05[\x11\xa0\xd3\x17\x85\xac\xb5*\xf9\x80\x0e\x7f\xcfrN\xec\xb3Z\xc8*\xc0H\xf7\xae\x00\x00\x00\x00\xcc`#\xa4\x912uw\xe0\xb7\xf9\x84\xeaK\x7fr\'\f2\xee\x83\x85\x06\x1b\x89f-\xb15\xb69\xe2\xe8M.4\xc1;\xb7\x97Ax\xc4\xf6\xc3\x13\xa1c\xe1yq\xb4\x82\xb6\'\x83\xba\xcd`\x1e\x9c\x1b\xe1\xa0eT\xad\xea#\xc1\x8f\x9a;M\x81\x04m\xb2F\x1a\xce\x12\xdb\x9dT\x13g\xe1\xec3\x8c\xf9f[\x06\x9aP\x83\xc8\xe5\xc3\xd4\x1a\x14F\x1fy\xa0\xc1T\x19\xa3v:\xaa\xc1*\xc8E\n\x00\x00\x00\x00\x00\x7f~\x14\x9f\xd3B].|0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3}) 22:27:28 executing program 2: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="737461639c04660d0a3ae4f300cef2748216971a5ba8c8fa30ef"], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b0b, &(0x7f0000000040)) 22:27:28 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x350c) 22:27:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000100013070000000000000000000000000200000000000000000000017f00000100000000000000000000ce00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004c0014006469676573745f6e756c6c0000000000000000000000000000000000000000000000000000000000000000000000000000000000b9f0159af4aee86ed7682e3147"], 0x13c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 22:27:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000003c0)={0x6455a3a4, "6980f48e0012f74e62730ae21680bfeac5f473ebee5b7c4b78641bb99df735a8"}) 22:27:29 executing program 2: r0 = socket(0xa, 0x3, 0xfc) getsockopt(r0, 0xff, 0x7, 0x0, &(0x7f0000000400)) 22:27:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x3e5) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}], 0x300, 0x2, 0x0) 22:27:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netlink\x00') r4 = socket(0x10, 0x8000000000000003, 0x0) sendfile(r4, r3, 0x0, 0x80000005) 22:27:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140f, 0x621}, 0x10}}, 0x0) 22:27:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) dup2(r3, r0) 22:27:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)={0x2, 0x0, [{0x0, 0x35, &(0x7f0000000040)=""/53}, {0x0, 0xd, &(0x7f0000000080)=""/13}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 22:27:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8001}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) 22:27:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050741a77c7ba006671700000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}]}]}]}}]}, 0x54}}, 0x0) 22:27:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x202, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x8000}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) socket(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fe0ec6e26560000000049d2e181baf945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30379c5bd7071cd3aaf2a1e80600cff8ca2996e518e3e69000"/250], 0xf0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000180)) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="010000000000000000000b0000000c00b7500700010069620000"], 0x3}}, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) 22:27:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x350c) 22:27:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x31, 0x119, 0x0, 0x0, {0x2}, [@nested={0x44, 0x0, 0x0, 0x1, [@generic="df9c349db585215d14007f792c34db95cfef577f6acb9ad207edd2afb6524f6e65342493bd2207b6efc561bec69094d9db4a478420e8f30e95778f326e623f32"]}]}, 0x58}}, 0x0) [ 1246.713886][ T4843] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 1246.724584][ T4843] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1246.805376][ T4849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1246.844161][ T4853] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1246.898587][ C1] sd 0:0:1:0: [sg0] tag#1317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1246.910040][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB: Test Unit Ready [ 1246.917681][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.927652][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.937666][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.947617][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.957543][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.967458][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.977529][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.987448][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1246.997369][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.007288][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.017176][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.027088][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.037071][ C1] sd 0:0:1:0: [sg0] tag#1317 CDB[c0]: 00 00 00 00 00 00 00 00 22:27:30 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, &(0x7f0000005900)=[{0x0}, {&(0x7f00000055c0)=""/138, 0x8a}], 0x2}}], 0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}], 0x300, 0x401eb94) [ 1247.117996][ T4851] IPVS: ftp: loaded support on port[0] = 21 [ 1247.148868][ T4859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:27:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000004"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}]}, 0x3c}}, 0x0) 22:27:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a5f30f09020019e02626205bf30f098503f800443c0f2096c00f0000000f22c00f2382f3e100", 0x31}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:27:30 executing program 5: mknod$loop(&(0x7f0000000380)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x4000, 0x0, &(0x7f0000000540)) 22:27:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0xa, 0xfff}, {0x1, 0x0, 0x0, 0x83b}]}) [ 1247.676269][ T4861] IPVS: ftp: loaded support on port[0] = 21 [ 1247.709860][ T4888] fuse: Bad value for 'fd' 22:27:30 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x350c) [ 1247.876606][ C1] sd 0:0:1:0: [sg0] tag#1318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1247.887514][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB: Test Unit Ready [ 1247.894405][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.904402][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.914382][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.924356][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.934308][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.944295][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.954288][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.964234][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:27:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000cb5a21507e1d5897e02d0419000000a268fcb3498fd56619b2faed4d79f2000072cbd5e46cd4a76d89c2766dda113914f482b579ef448034d021d7954da4cec635b5318b86abf16451d99b13e525a7483c8d46324e4132a2600fcbde79e57d"], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000180)) 22:27:31 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) read(r0, &(0x7f00000000c0)=""/36, 0x24) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 1247.974193][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.984192][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1247.994164][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1248.004143][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1248.014810][ C1] sd 0:0:1:0: [sg0] tag#1318 CDB[c0]: 00 00 00 00 00 00 00 00 22:27:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0xa, 0xfff}, {0x1, 0x0, 0x0, 0x83b}]}) [ 1248.449686][ T1205] tipc: TX() has been purged, node left! 22:27:31 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x34, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000001d0000000000000008"]}, 0xac) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x49d}) 22:27:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd4, &(0x7f0000000140)="c4fe910c6786cec96ddb5322addee07b02000000cacd891969b718323514dca7712c225da438f9dbd0fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb9693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b07817bb986234093f2623193c8ff3177fc84e28d36d47e7f970ed174ce21c760da77598e5821b74c389f3fa7406ec26cd82de07f4a208f3e17e1a5cf9bb1f24ad4865117b4163f4ea05c949ce5c7b2738f1bde8a2150f958d0de89263a99e47b3"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:27:31 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x350c) 22:27:31 executing program 1: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0x2, 0x0}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x34, 0x1001) writev(r0, &(0x7f00000000c0), 0x10000000000000a4) 22:27:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0xa, 0xfff}, {0x1, 0x0, 0x0, 0x83b}]}) 22:27:31 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7065726d68617420da0ad1f630303030303030303030206da9fc303030305e5302e4085634e84ebbdc3206fd9e0000ebc8245e0d"], 0x1b) 22:27:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0xa, 0xfff}, {0x1, 0x0, 0x0, 0x83b}]}) 22:27:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x18}]}, 0x2c}}, 0x0) 22:27:32 executing program 4: r0 = memfd_create(&(0x7f0000000300)='#!\xc6I\xbb\xa5\x01\x96\x90\x06', 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0xff37, 0x0) 22:27:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77000300020020007700002000000000000040000000000000000000", 0xffffffe5}], 0x2) [ 1248.998167][ T4977] AppArmor: change_hat: Invalid input 'Ú [ 1248.998167][ T4977] Ñö0000000000 m©ü0' [ 1249.335575][ T4987] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 22:27:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') eventfd2(0x3e8, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5603, 0x4220}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8001}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MASTER={0x8}]}, 0xbc}}, 0x0) [ 1249.529247][ T4992] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 22:27:32 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xd9}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000380)=""/157, 0x9d}], 0x2, &(0x7f0000000280)=""/173, 0xad}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff4c) 22:27:32 executing program 5: unshare(0x20600) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) 22:27:34 executing program 2: add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f00000001c0)=""/83, 0x53, 0x0) 22:27:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000035000535d25a80648c63940d04246760a96a00000a000000053582c137153e370900018000f0f800d1bd", 0x2e}], 0x1}, 0x0) 22:27:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x5c}}, 0x0) 22:27:34 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e00000009000100666c6f7700000000400002003c000980380001000800010069707400280020002400010066696c7465720000000000000000000000000000000000000000000000000000040006003c5592310e984460f8d672f748acbccc1befbdae7dfcdb3c6f893b2d63a5083cb13f2779e5f4e4d6cde6c5a4a7c265897108b5a746"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:27:34 executing program 5: unshare(0x20600) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) 22:27:34 executing program 4: unshare(0x20600) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) [ 1251.748624][ T1205] tipc: TX() has been purged, node left! [ 1251.754512][ T5026] device veth44 entered promiscuous mode [ 1251.892277][ T5040] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1252.020965][ T5026] device veth46 entered promiscuous mode 22:27:35 executing program 5: unshare(0x20600) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) 22:27:35 executing program 4: unshare(0x20600) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) 22:27:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x20000000000036, 0x829, 0x0, 0x0, {0x3, 0x1000000, 0x1000000}, [@nested={0x4}, @typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) 22:27:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1, 0x1, 0x101}, 0x14}}, 0x0) [ 1252.466443][ T5055] netlink: get zone limit has 4 unknown bytes 22:27:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) 22:27:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x0, 0x3c}, @in6=@ipv4={[], [], @multicast1}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 22:27:35 executing program 4: unshare(0x20600) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) 22:27:35 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:27:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="5500000018007f0200fe05b2a4a280930a060001fe800002140f0000390009002d0050000600000019000540029b84136ef75afb83de441100ae20ca3ab8220000060cec4fab91d471cd34938c42f030dd941e7931", 0x55}], 0x1}, 0x0) 22:27:35 executing program 5: unshare(0x20600) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) 22:27:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x68}}, 0x0) 22:27:36 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x197) r1 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xfffffdef) [ 1253.029155][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 22:27:36 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000140)) [ 1253.277117][ C1] sd 0:0:1:0: [sg0] tag#1336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1253.287807][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB: Test Unit Ready [ 1253.294681][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.304644][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.314543][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:27:36 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x800, 0x400000, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175d"], 0xd3) sync() [ 1253.324449][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.334391][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.344292][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.354200][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.364098][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:27:36 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp\x00') memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x280000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/1, 0x1}}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x200000f5}], 0x8) [ 1253.374378][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.384277][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.394171][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.404093][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.414014][ C1] sd 0:0:1:0: [sg0] tag#1336 CDB[c0]: 00 00 00 00 00 00 00 00 22:27:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x84}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 22:27:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGKEY(r0, 0x80044501, &(0x7f0000002340)=""/203) [ 1253.691220][ C0] sd 0:0:1:0: [sg0] tag#1343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1253.701951][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB: Test Unit Ready [ 1253.708745][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.719832][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.729774][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.739605][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.749457][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.759354][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.769349][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.779301][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.789233][ T4035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1253.789261][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.789360][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.816278][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.826122][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1253.835965][ C0] sd 0:0:1:0: [sg0] tag#1343 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1253.845915][ T4035] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1254.369738][ T5100] device lo entered promiscuous mode [ 1254.403329][ T5100] device lo left promiscuous mode 22:27:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r5, r0) 22:27:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0xfffffffffffffc70) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 22:27:37 executing program 3: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)) [ 1254.544769][ C1] sd 0:0:1:0: [sg0] tag#1295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1254.555621][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB: Test Unit Ready [ 1254.562485][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.572539][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.582533][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.592546][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.602529][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.612495][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.622444][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.632400][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.642358][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.652334][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.662288][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.672266][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.682299][ C1] sd 0:0:1:0: [sg0] tag#1295 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1254.709118][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1254.725227][ C0] sd 0:0:1:0: [sg0] tag#1296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1254.735896][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB: Test Unit Ready [ 1254.742642][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.752520][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.762373][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.772223][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.782102][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.792824][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.802666][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.812524][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.822365][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.832256][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.842116][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.851981][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1254.861830][ C0] sd 0:0:1:0: [sg0] tag#1296 CDB[c0]: 00 00 00 00 00 00 00 00 22:27:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84e0060000c9c8dc1964325fa96fa42b76830000402bec0ba4c81036c93a40c8a4c20000003b00040000000000003c5ca2410101c0ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) 22:27:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 22:27:38 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x197) r1 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xfffffdef) [ 1255.258929][ T5111] kvm [5110]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0xa25c3c0000000000 22:27:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x7f, &(0x7f000028b000/0x1000)=nil, 0x2) 22:27:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x50, 0x0, 0x0, 0xfffffffe}, {0x80000006}]}, 0x10) r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, 0x0, 0x0) [ 1255.715092][ C1] sd 0:0:1:0: [sg0] tag#1312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1255.725821][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB: Test Unit Ready [ 1255.732635][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.742541][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.752432][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.762318][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.772213][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.782127][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.792025][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.801925][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.811849][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.821743][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.831644][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.841563][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1255.851456][ C1] sd 0:0:1:0: [sg0] tag#1312 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1255.879888][ T5129] ===================================================== [ 1255.887000][ T5129] BUG: KMSAN: uninit-value in bpf_skb_load_helper_8+0xe0/0x290 [ 1255.890615][ T5129] CPU: 1 PID: 5129 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1255.890615][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.890615][ T5129] Call Trace: [ 1255.890615][ T5129] dump_stack+0x1c9/0x220 [ 1255.920864][ T5129] kmsan_report+0xf7/0x1e0 [ 1255.920864][ T5129] __msan_warning+0x58/0xa0 [ 1255.920864][ T5129] bpf_skb_load_helper_8+0xe0/0x290 [ 1255.920864][ T5129] ___bpf_prog_run+0x214d/0x97a0 [ 1255.920864][ T5129] ? __x64_sys_write+0x4a/0x70 [ 1255.920864][ T5129] ? do_syscall_64+0xb8/0x160 [ 1255.920864][ T5129] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 1255.920864][ T5129] __bpf_prog_run32+0x101/0x170 [ 1255.920864][ T5129] ? kmsan_get_metadata+0x4f/0x180 [ 1255.920864][ T5129] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1255.920864][ T5129] ? ___bpf_prog_run+0x97a0/0x97a0 [ 1255.920864][ T5129] packet_rcv+0x70f/0x2160 [ 1255.920864][ T5129] ? packet_sock_destruct+0x1e0/0x1e0 [ 1255.920864][ T5129] dev_queue_xmit_nit+0x862/0x1270 [ 1255.920864][ T5129] dev_hard_start_xmit+0x20f/0xab0 [ 1255.920864][ T5129] ? kmsan_get_metadata+0x11d/0x180 [ 1255.920864][ T5129] __dev_queue_xmit+0x2f8d/0x3b20 [ 1255.920864][ T5129] ? kmsan_get_metadata+0x11d/0x180 [ 1255.920864][ T5129] ? skb_clone+0x404/0x5d0 [ 1255.920864][ T5129] dev_queue_xmit+0x4b/0x60 [ 1255.920864][ T5129] netlink_deliver_tap+0x9d4/0xea0 [ 1255.920864][ T5129] ? __netlink_lookup+0x8b9/0x980 [ 1255.920864][ T5129] ? kmsan_set_origin_checked+0x95/0xf0 [ 1255.920864][ T5129] netlink_unicast+0xe87/0x1100 [ 1255.920864][ T5129] netlink_sendmsg+0x1246/0x14d0 [ 1255.920864][ T5129] ? inet_send_prepare+0x600/0x600 [ 1255.920864][ T5129] ? netlink_getsockopt+0x1440/0x1440 [ 1255.920864][ T5129] sock_write_iter+0x6bc/0x6d0 [ 1255.920864][ T5129] ? sock_read_iter+0x700/0x700 [ 1255.920864][ T5129] __vfs_write+0xa5a/0xca0 [ 1255.920864][ T5129] vfs_write+0x444/0x8e0 [ 1255.920864][ T5129] ksys_write+0x267/0x450 [ 1255.920864][ T5129] __se_sys_write+0x92/0xb0 [ 1255.920864][ T5129] __x64_sys_write+0x4a/0x70 [ 1255.920864][ T5129] do_syscall_64+0xb8/0x160 [ 1255.920864][ T5129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1255.920864][ T5129] RIP: 0033:0x45ca29 [ 1255.920864][ T5129] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1255.920864][ T5129] RSP: 002b:00007f711677dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1255.920864][ T5129] RAX: ffffffffffffffda RBX: 000000000050a4c0 RCX: 000000000045ca29 [ 1255.920864][ T5129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1255.920864][ T5129] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1255.920864][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1255.920864][ T5129] R13: 0000000000000c5a R14: 00000000004ca2fd R15: 00007f711677e6d4 [ 1255.920864][ T5129] [ 1255.920864][ T5129] Uninit was stored to memory at: [ 1255.920864][ T5129] kmsan_internal_chain_origin+0xad/0x130 [ 1255.920864][ T5129] __msan_chain_origin+0x50/0x90 [ 1255.920864][ T5129] ___bpf_prog_run+0x6c80/0x97a0 [ 1255.920864][ T5129] __bpf_prog_run32+0x101/0x170 [ 1255.920864][ T5129] packet_rcv+0x70f/0x2160 [ 1255.920864][ T5129] dev_queue_xmit_nit+0x862/0x1270 [ 1255.920864][ T5129] dev_hard_start_xmit+0x20f/0xab0 [ 1255.920864][ T5129] __dev_queue_xmit+0x2f8d/0x3b20 [ 1255.920864][ T5129] dev_queue_xmit+0x4b/0x60 [ 1255.920864][ T5129] netlink_deliver_tap+0x9d4/0xea0 [ 1255.920864][ T5129] netlink_unicast+0xe87/0x1100 [ 1255.920864][ T5129] netlink_sendmsg+0x1246/0x14d0 [ 1255.920864][ T5129] sock_write_iter+0x6bc/0x6d0 [ 1255.920864][ T5129] __vfs_write+0xa5a/0xca0 [ 1255.920864][ T5129] vfs_write+0x444/0x8e0 [ 1255.920864][ T5129] ksys_write+0x267/0x450 [ 1255.920864][ T5129] __se_sys_write+0x92/0xb0 [ 1255.920864][ T5129] __x64_sys_write+0x4a/0x70 [ 1255.920864][ T5129] do_syscall_64+0xb8/0x160 [ 1255.920864][ T5129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1255.920864][ T5129] [ 1255.920864][ T5129] Uninit was stored to memory at: [ 1255.920864][ T5129] kmsan_internal_chain_origin+0xad/0x130 [ 1255.920864][ T5129] __msan_chain_origin+0x50/0x90 [ 1255.920864][ T5129] ___bpf_prog_run+0x6cbe/0x97a0 [ 1255.920864][ T5129] __bpf_prog_run32+0x101/0x170 [ 1255.920864][ T5129] packet_rcv+0x70f/0x2160 [ 1255.920864][ T5129] dev_queue_xmit_nit+0x862/0x1270 [ 1255.920864][ T5129] dev_hard_start_xmit+0x20f/0xab0 [ 1255.920864][ T5129] __dev_queue_xmit+0x2f8d/0x3b20 [ 1255.920864][ T5129] dev_queue_xmit+0x4b/0x60 [ 1255.920864][ T5129] netlink_deliver_tap+0x9d4/0xea0 [ 1255.920864][ T5129] netlink_unicast+0xe87/0x1100 [ 1255.920864][ T5129] netlink_sendmsg+0x1246/0x14d0 [ 1255.920864][ T5129] sock_write_iter+0x6bc/0x6d0 [ 1255.920864][ T5129] __vfs_write+0xa5a/0xca0 [ 1255.920864][ T5129] vfs_write+0x444/0x8e0 [ 1255.920864][ T5129] ksys_write+0x267/0x450 [ 1255.920864][ T5129] __se_sys_write+0x92/0xb0 [ 1255.920864][ T5129] __x64_sys_write+0x4a/0x70 [ 1255.920864][ T5129] do_syscall_64+0xb8/0x160 [ 1255.920864][ T5129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1255.920864][ T5129] [ 1255.920864][ T5129] Uninit was stored to memory at: [ 1255.920864][ T5129] kmsan_internal_chain_origin+0xad/0x130 [ 1255.920864][ T5129] __msan_chain_origin+0x50/0x90 [ 1255.920864][ T5129] ___bpf_prog_run+0x6c64/0x97a0 [ 1255.920864][ T5129] __bpf_prog_run32+0x101/0x170 [ 1255.920864][ T5129] packet_rcv+0x70f/0x2160 [ 1255.920864][ T5129] dev_queue_xmit_nit+0x862/0x1270 [ 1255.920864][ T5129] dev_hard_start_xmit+0x20f/0xab0 [ 1255.920864][ T5129] __dev_queue_xmit+0x2f8d/0x3b20 [ 1255.920864][ T5129] dev_queue_xmit+0x4b/0x60 [ 1255.920864][ T5129] netlink_deliver_tap+0x9d4/0xea0 [ 1255.920864][ T5129] netlink_unicast+0xe87/0x1100 [ 1255.920864][ T5129] netlink_sendmsg+0x1246/0x14d0 [ 1255.920864][ T5129] sock_write_iter+0x6bc/0x6d0 [ 1255.920864][ T5129] __vfs_write+0xa5a/0xca0 [ 1255.920864][ T5129] vfs_write+0x444/0x8e0 [ 1255.920864][ T5129] ksys_write+0x267/0x450 [ 1255.920864][ T5129] __se_sys_write+0x92/0xb0 [ 1255.920864][ T5129] __x64_sys_write+0x4a/0x70 [ 1255.920864][ T5129] do_syscall_64+0xb8/0x160 [ 1255.920864][ T5129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1255.920864][ T5129] [ 1255.920864][ T5129] Local variable ----regs@__bpf_prog_run32 created at: [ 1255.920864][ T5129] __bpf_prog_run32+0x87/0x170 [ 1255.920864][ T5129] __bpf_prog_run32+0x87/0x170 [ 1255.920864][ T5129] ===================================================== [ 1255.920864][ T5129] Disabling lock debugging due to kernel taint [ 1255.920864][ T5129] Kernel panic - not syncing: panic_on_warn set ... [ 1255.920864][ T5129] CPU: 1 PID: 5129 Comm: syz-executor.3 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 1255.920864][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.920864][ T5129] Call Trace: [ 1255.920864][ T5129] dump_stack+0x1c9/0x220 [ 1255.920864][ T5129] panic+0x3d5/0xc3e [ 1255.920864][ T5129] kmsan_report+0x1df/0x1e0 [ 1255.920864][ T5129] __msan_warning+0x58/0xa0 [ 1255.920864][ T5129] bpf_skb_load_helper_8+0xe0/0x290 [ 1255.920864][ T5129] ___bpf_prog_run+0x214d/0x97a0 [ 1255.920864][ T5129] ? __x64_sys_write+0x4a/0x70 [ 1255.920864][ T5129] ? do_syscall_64+0xb8/0x160 [ 1255.920864][ T5129] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 1255.920864][ T5129] __bpf_prog_run32+0x101/0x170 [ 1255.920864][ T5129] ? kmsan_get_metadata+0x4f/0x180 [ 1255.920864][ T5129] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1255.920864][ T5129] ? ___bpf_prog_run+0x97a0/0x97a0 [ 1255.920864][ T5129] packet_rcv+0x70f/0x2160 [ 1255.920864][ T5129] ? packet_sock_destruct+0x1e0/0x1e0 [ 1255.920864][ T5129] dev_queue_xmit_nit+0x862/0x1270 [ 1255.920864][ T5129] dev_hard_start_xmit+0x20f/0xab0 [ 1255.920864][ T5129] ? kmsan_get_metadata+0x11d/0x180 [ 1255.920864][ T5129] __dev_queue_xmit+0x2f8d/0x3b20 [ 1255.920864][ T5129] ? kmsan_get_metadata+0x11d/0x180 [ 1255.920864][ T5129] ? skb_clone+0x404/0x5d0 [ 1255.920864][ T5129] dev_queue_xmit+0x4b/0x60 [ 1255.920864][ T5129] netlink_deliver_tap+0x9d4/0xea0 [ 1255.920864][ T5129] ? __netlink_lookup+0x8b9/0x980 [ 1255.920864][ T5129] ? kmsan_set_origin_checked+0x95/0xf0 [ 1255.920864][ T5129] netlink_unicast+0xe87/0x1100 [ 1255.920864][ T5129] netlink_sendmsg+0x1246/0x14d0 [ 1255.920864][ T5129] ? inet_send_prepare+0x600/0x600 [ 1255.920864][ T5129] ? netlink_getsockopt+0x1440/0x1440 [ 1255.920864][ T5129] sock_write_iter+0x6bc/0x6d0 [ 1255.920864][ T5129] ? sock_read_iter+0x700/0x700 [ 1255.920864][ T5129] __vfs_write+0xa5a/0xca0 [ 1255.920864][ T5129] vfs_write+0x444/0x8e0 [ 1255.920864][ T5129] ksys_write+0x267/0x450 [ 1255.920864][ T5129] __se_sys_write+0x92/0xb0 [ 1255.920864][ T5129] __x64_sys_write+0x4a/0x70 [ 1255.920864][ T5129] do_syscall_64+0xb8/0x160 [ 1255.920864][ T5129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1255.920864][ T5129] RIP: 0033:0x45ca29 [ 1255.920864][ T5129] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1255.920864][ T5129] RSP: 002b:00007f711677dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1255.920864][ T5129] RAX: ffffffffffffffda RBX: 000000000050a4c0 RCX: 000000000045ca29 [ 1255.920864][ T5129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1255.920864][ T5129] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1255.920864][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1255.920864][ T5129] R13: 0000000000000c5a R14: 00000000004ca2fd R15: 00007f711677e6d4 [ 1255.920864][ T5129] Kernel Offset: 0x2a400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1255.920864][ T5129] Rebooting in 86400 seconds..