Warning: Permanently added '10.128.0.164' (ECDSA) to the list of known hosts. 2020/09/26 11:35:04 fuzzer started 2020/09/26 11:35:05 dialing manager at 10.128.0.26:36865 2020/09/26 11:35:06 syscalls: 3189 2020/09/26 11:35:06 code coverage: enabled 2020/09/26 11:35:06 comparison tracing: enabled 2020/09/26 11:35:06 extra coverage: enabled 2020/09/26 11:35:06 setuid sandbox: enabled 2020/09/26 11:35:06 namespace sandbox: enabled 2020/09/26 11:35:06 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/26 11:35:06 fault injection: enabled 2020/09/26 11:35:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/26 11:35:06 net packet injection: enabled 2020/09/26 11:35:06 net device setup: enabled 2020/09/26 11:35:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/26 11:35:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/26 11:35:06 USB emulation: enabled 2020/09/26 11:35:06 hci packet injection: enabled 2020/09/26 11:35:06 wifi device emulation: enabled 11:39:40 executing program 0: syzkaller login: [ 439.188412][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 439.774713][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 439.929038][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.936701][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.946466][ T8514] device bridge_slave_0 entered promiscuous mode [ 439.969248][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.976633][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.986395][ T8514] device bridge_slave_1 entered promiscuous mode [ 440.074035][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.092137][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.151365][ T8514] team0: Port device team_slave_0 added [ 440.168909][ T8514] team0: Port device team_slave_1 added [ 440.220545][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.227622][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.254599][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.279134][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.287492][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.313743][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.390306][ T8514] device hsr_slave_0 entered promiscuous mode [ 440.400382][ T8514] device hsr_slave_1 entered promiscuous mode [ 440.750984][ T8514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.779453][ T8514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.820855][ T8514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.864529][ T8514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.061255][ T12] Bluetooth: hci0: command 0x0409 tx timeout [ 441.251839][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.292799][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.302853][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.326319][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.352473][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.364366][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.374139][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.381635][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.394782][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.412655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.422761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.432467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.439843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.492317][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.503827][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.551293][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.562905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.573784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.584893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.595616][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.605786][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.617921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.639979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.651556][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.677770][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.742827][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.750583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.781237][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.852301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.863114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.938078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.948498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.976085][ T8514] device veth0_vlan entered promiscuous mode [ 441.986426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.995922][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.040311][ T8514] device veth1_vlan entered promiscuous mode [ 442.125970][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.135718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 442.145508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.155712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.176450][ T8514] device veth0_macvtap entered promiscuous mode [ 442.218755][ T8514] device veth1_macvtap entered promiscuous mode [ 442.282080][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.291581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.301348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.311086][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.321399][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.352391][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.362605][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 442.372269][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 442.399144][ T8514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.409680][ T8514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.418700][ T8514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.427619][ T8514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.773569][ T8730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.781868][ T8730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.791010][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.916769][ T925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.924865][ T925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.933728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:39:46 executing program 0: [ 443.140961][ T12] Bluetooth: hci0: command 0x041b tx timeout 11:39:46 executing program 0: 11:39:46 executing program 0: 11:39:47 executing program 0: 11:39:47 executing program 0: 11:39:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5112, 0x40) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f00000000c0)={0x800, 0x10001, 0x708, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 444.303123][ T8763] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 444.313142][ T8763] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 11:39:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20040084) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e0001006970366772657461700000001400028008000100", @ANYRES32=r3, @ANYBLOB="dc40f520f2fe8b6cd48fc517b38a4be9337d08aa7268c96e2bc3d0939d49c7ad8eb34bb9a5c8f6c281e889"], 0x48}}, 0x0) [ 444.353039][ T8764] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 444.556021][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.624592][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 11:39:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 11:39:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020201030000000002060007400001000000000066000000"], 0x1c}}, 0x8800) listxattr(&(0x7f0000000180)='./bus\x00', &(0x7f0000000280)=""/154, 0x9a) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f000001cff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x2000c891}, 0x0) finit_module(r1, &(0x7f0000000140)='(^]#vmnet0][em1lo}+@^\x00', 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000500)={0x7fffffff, [[0x400, 0x0, 0x7fff, 0x4, 0x8, 0x0, 0x2, 0x1], [0x8001, 0x1, 0x9, 0x20, 0x8, 0x4, 0x8, 0x587c], [0x1, 0x0, 0x0, 0x10001, 0x0, 0x200, 0x3, 0x25]], [], [{0x6, 0x3ff, 0x0, 0x0, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1}, {0x1, 0xdd1a, 0x1, 0x0, 0x1, 0x1}, {0xfffffffa, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x20, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x7, 0xc0, 0x1}, {0x95, 0x81, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x1}, {0xfffffffe, 0x5}, {0x2, 0xffff739f, 0x1, 0x1, 0x0, 0x1}, {0xa537, 0x1, 0x1, 0x1}], [], 0x5}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000940)=ANY=[@ANYBLOB="060000000000000000000000001084b6052f3ae7d6a53d9123a9bb47c52f650bedb17c1b6de449ec6aea5953c664036720542eb03a4d4db385f3175b76460ddc15c8f40d53b94203cd647f19e64d27179ecc59a52fafc7ec83532fb64d4217561aa185e7f28fa3cef8a8e6010ca0e867d6e3580e82873204321893cff943f934524ae54764b59e81e255208940770115dd32371e2927f3d1f34d534804f93480c920ab6e852b3c874a9f4999fa67c9"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4000004}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x3, 0x0, @time, {}, {}, @connect}], 0x1c) [ 445.165571][ T27] audit: type=1800 audit(1601120388.460:2): pid=8782 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15716 res=0 errno=0 [ 445.232271][ T12] Bluetooth: hci0: command 0x040f tx timeout 11:39:48 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x801) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x8000000, 0x8001, 0x5}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0285628, &(0x7f0000000100)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) fchdir(r0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x510, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x250002, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140e, 0x11}, 0x10}, 0x1, 0x0, 0x0, 0x24004851}, 0x880) 11:39:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100), 0x14) r1 = gettid() tkill(r1, 0x1004000000016) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000500)=0x8, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x2, 0x800, 0x9, 0x2, 0x7fff, 0x2], 0x6, 0x80000}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r3, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="38bd03403a18d1fe4aaa81147ef1843d8831659df4e9949fa5d17804a19b2f77d8c0bfe47350874bcb59df473b1927620da872d69958aa481f85620711c8811174290c58f15fa52355550d01016c8253e24dba330a5efa1e7a7fd4114f3b1d18efbae42f4ad30d645218dffa8344c2590c0aae51e30608e52939356b69136c5670754c4a0755879ed877de34ce0ebe46a159781a2387c81c23937ebc85aa92c6b97a0e74d3692024bd0a357bc4d74eb999d93f5c90f6e858a7b34984593e31fa687055af566728efabf2f0d6a851972d3b6d264c124c59660064b5fbfc836077b5c7d97e2f46a7574862809a93d71f3f1ec9a442", 0xf4}, {&(0x7f0000000240)="31c33647bea7ac611840811b837cb730668fc43968f73ca7e071351621c3563e03112cd0099ac8094fabfd45e08d700612b26dc17a777fc6cc09c58440167f3c64e2a0c524546c07aceb90b4257a2777e74eb6eff002c4f627878ccfb351ae72dae68d2f8908312f55d299749367c7b319231bbb37a1f87f3f403d6509a91b454206850e9ac386a7484fa716db76d803376b350a66b2b142810a1e35d7a3a7611d2e3a2634c268633273fafae8bf4ba8665a111bf504a573865c7521fc044efcf7efb26e399ebd440e4e2344b92d97ee9db5e9779e24dff53f5ee53a1e6f623c1c82834085524d05e2a53ac7433d26c7a68411408dcac6e1d3", 0xf9}, {&(0x7f0000000080)="c427d9c1d99e17039bdd7a26de2198fae264a1d3698a92e997e708e9e660bb086d1888ec7e8d7b41a55efa9972d03618bc4dae0cc402610aef70c578d7dc484aac17c53ae717e45f6a935f9e82f51a835e12c596a3950ec57e40dcf7a61a60424b5c8d94ec", 0x65}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r3, r0, r0, r0, r0, r0, r4, r0]}}], 0x78, 0x24048091}, 0x8000) [ 447.302463][ T8727] Bluetooth: hci0: command 0x0419 tx timeout 11:39:51 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'gretap0\x00', 0x4}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x9, 0xff, 0x2f, 0x73}, {0x7, 0x47, 0x3, 0x1f}, {0xe45c, 0x9, 0x40, 0xcfd}, {0x1, 0x3, 0x7f, 0x7f}, {0x5, 0x34, 0x8, 0x1ff}, {0x6, 0x3, 0x0, 0x7}]}, 0x10) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000200)=0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000240)=""/29) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000280)={0x1, 0x800, 0x9}) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000300)={0x0, @aes128}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={0x0, 0x39, 0xe2}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'blake2b-160-generic\x00'}}, &(0x7f0000000400)="7c33c5eb4382a499c764c28c489798597bdcc973e4ed7944af7b8d29d5204ba6754c12fb6e24d5f71fe133026754182f177bfa6b6eecbc9e06", &(0x7f0000000440)=""/226) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x800, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000580)={0x5, {0x30, 0x2, 0x3, 0x20, 0x7}}) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000005c0)={0x8, 0x81, 0x1, 0x5, 0xff, "2bcf20487e65b2171d84940a4cb95e2a9ac27f"}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0x83, "bb4a440742f8386428dfbe0bbe3930c42ddf9ced7ce8add7d17a0fe0e4d46043bf3c366c3cb878da296b95ad9873b203c96f4aea5ff7779743805c68050088ec19153fddbbc99acc82f330b8d3b0931d30703d49d71122f82e1249045215b0c7cc22c1bd2edfbd67d961efb9df830826add7149b1abcfca4abf11d0fa73e54e5aa78a1"}, &(0x7f0000000740)=0xa7) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "51d4e272b2d9b567ef"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8399666a28"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "486db8977c8e39ff8fd996b4ea"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db421005f3a1dc121b4da6ef42"}]}, 0x5c}}, 0x40) 11:39:52 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x8, 0xff, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000a00), 0x1}, 0x8004, 0x0, 0x0, 0x8, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xab32, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/460], 0x58) socket(0x8, 0x0, 0xfffff76e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000300)={@none, 0x1ff, 0x8, 0x7}) request_key(&(0x7f00000002c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)='\x00\x00\x00\x02\x00\x00*\xefE\x7f\x00\x00\x00', 0xfffffffffffffff9) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x63e}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x200}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = creat(&(0x7f0000000a40)='./file0\x00', 0x1a0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x20400204) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) recvmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000840)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/184, 0xb8}, {&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f00000007c0)=""/70, 0x46}], 0x6, &(0x7f00000008c0)=""/230, 0xe6}, 0x10000) [ 448.891483][ T8798] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:39:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746870e9335d39b42e507e605f8bbe63268e77928390b3253e6cdd2b16dba610f7bdb11ae5e121633972176907ff81ff407d5e4fc4110bcbec136fd0d8a606b8a00d08dcb450a6dde03eba676b1273d8a9fd6de71a83179858c0b6c322c3"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000006c0)={0x74, 0x0, [0xc2d, 0x408d, 0xf0a1, 0x9]}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$cgroup_int(r7, &(0x7f0000000080)=0x5, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7, 0x1, 'mq\x00'}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="837538c0e72e8b1a4d544475643238a1789bb23fa579e161aea2b34e1b28dd", 0x1f}, {&(0x7f0000000400)="3ba20fdab0d57fa2ccae096b5ef8b3c874b7807291d15ae1d01595e325a6228b18bda8599a4eb0e735df0b10b7656c3534708eaca5228b433b3449ffd79825d4b05afaeb73b91e97c98007ca0ba11376a1f583a1725f419125667acc088c280fd495e201bf1ddc5e46d76bcf3c8922e4e3d7622d6dd436e301775a4d0bc224a4ec41b29f78a654a33c30c8e1f0f1ad86165104fcced4d2351e9a8497c1e94410c329c9a663096fee8fddae2bbefc82da4edfb7489e78359f12932ed190d87b3280471f30fe568ab3f2c11828ed14688c6fc8d9", 0xd3}, {&(0x7f0000000500)="b1dfee4067da3a29583ef5c769f6f5b44f9aa0f9f6161d8be7b11908e17a32446b21ce243f386cf656196b1b55187eba5641bad29a657ee0feefa46e452b75dc04572d996e0e557ac3e965c4717cfe0571ae5e4e33a8939a218239caec436b20d1f1b5", 0xa3}, {&(0x7f0000000580)="8a5f4719504e66343b6804e4f8b2340254433769b3abaa64775505752f719535e103ea6aa781df8f8cbc03f8add601b721a3f4070861f7a899fcd396a4cab1cabafeb6cef763f882d7cc4fc0dfcf23b69cce40286850a54999f87fe50061c7c7d4f17384d6f235b428a0c07ff7266cf9f842fb9900325b1c867c7f01b156cbd13d9c", 0x82}, {&(0x7f0000000340)="421b79c114cdd6eedb2ebfaa3e7c1856b9dd97a0e889e7eca7ef69a64d73f34ad3ee68dcf9e64192137fd3b8663f34e405be26a710", 0x35}], 0x5, &(0x7f0000000740)=[@assoc={0x0, 0x117, 0x4, 0x7}], 0x48}], 0x1, 0x0) [ 449.326926][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.373570][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:39:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00010000000000000031e6e672000000000000000000002e0cc4bb91f749e30875afda682f2633eb3e850f9da462108af429cffa4fc2a3f182633b1803b88f4965082cd268e867157a5a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002c0000000000"], 0x3c}}, 0x0) 11:39:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x600280, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = getpid() r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xffffffffffffff00}, 0x4020, 0x0, 0x7, 0x5, 0x2, 0x7beb}, r1, 0x0, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]}, 0x3c1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xffffffe1, 0x3, 0x7, 0x0, 0x1}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r4, 0x7, 0x800, 0x2, 0x7, 0x8}, 0x14) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000002c0)) [ 449.809466][ C1] hrtimer: interrupt took 70103 ns [ 449.856510][ T8822] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.867574][ T8822] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.940201][ T8825] IPVS: ftp: loaded support on port[0] = 21 [ 450.472476][ T8822] team0: Port device veth3 added 11:39:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000200000000000000dafa8938e5e5338429a2eceebe2035c0f056a759014efa762617ee0436a55c235d10b30f009be6bb53309f261de38996df2b766cd6fbd333516b1afdf2dd1e276315e3f33126ffa7683e916efebfafcf3739cc2e026edbf7e2432f32bc067d5580dc57872da6a25da543e28db676357cbdebf699845e274c980a9b5c82a27a58812a1cede01d7f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000300656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) [ 451.343951][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 451.359289][ T8936] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.602394][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.609653][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.625666][ T8825] device bridge_slave_0 entered promiscuous mode [ 451.639823][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state 11:39:54 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f", 0x7) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x3, 0x3, 0x7, 0x1, 0xd6, 0x2, 0x72c, 0x2, 0x4, 0x3, 0x0, 0xb502, 0x2, 0x20, 0x1, 0x3], 0x5000, 0x402}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xfff00000}, {0x6}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r4, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) r5 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x801) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0285628, &(0x7f0000000100)) fchdir(0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000001c0)={{r5}, "1b8386c2bb2ac0e22b8a7bb4e75987749b80e4ef9311adfe7642d9269bf9cb3d72a38da3e33d795363c762b94a40ab820fbe87a58f84f9fc96add6e8e7b73355e22ae79a5a4fac190b50b548ee8e36000de15923d649c99825bd0a6979677ed5c941b2a7c231d0493c1eea2c822a939a3d2ed4dd5ae2ab94555325ca8fede7a3c18a8134999d473423c94e543cf58e0072469bf7d6cd0fa1c23a3722b4eb801234106d9a08cb8f7842450abc87f60029a3a577ebe5ad76392391ec7f6b908c875f4a8f1d27a24dd6fcf4cc449cb22beaf96950f820c33e0f097d5561ac2a95175f66047cc2f52b549f0ce2ce2979cf9c4ffe86767d1109687bc1154886b37ae91d4aff183730bfb6454f76f00602213ea090e807c858a148fadff95cfd796e9530bff7c7d373a80aaf22d2147aa989f9fa13928b8371ab8edd2b0e7d7de873f501d0abbcae04aa61d26aadc6d0bff9889ee1162b99733c1bfb0263d66fc18b220a1d3a8ff206eb2eae4e6792ce22025cded7aa7a6d50d5d7e81a893bf6b778330c080a7d0b2ae8ba869b5fff04c2cfdc071d981ac7020797943d507a7d9f7e19a0761781e17e42ec0f5e1b37b2af4a99452ad6b7b1cae3152839a62a2e744ee09ed0112f279c90d8e95a0b3190a914234319b573d25e41ecde966d30899b5c2798c34280d3e356c6c65ce20bbcc4c94c6db10c65363e0b5b058c96d41a273505e7594b2496e4706c20f556166a1034a5ca4f5e9eff28e10c83efe0006a5dac5959dccbbd1714d6e1de52a2999d5fdea54715811ac69a4fdbdde9425f97f041cc792ed84d3ee75c5c864e9cce0951c71e552c5e8428c42924e457d62ed93bc9150b24a4d256595667a676b74b30f63626a2ef0dcda1a00562718874038c996074006b7a8eb8e7a3399e4ad3d47ba13987f293ad9a0205277e685d8446b73818b106efb7f269731b13e849853e08b3a08bfafa9aeecbaa1768aa19c7959e308514daf8d198e881141f3413652855c20f8b0e72ad6b12d231e52b0f249a1f774dd5aec44e4f10199364b62cebaa25189bce6d34ba184ee2851801fe7f96f73cd7fd5cdb4b1431c5b74da010491eca1b51d8ab5e4431d20d1d93fe0c74c2a6f79894f05a6d85414dfedd004f337cb29647a5c2aad4eb805624df5f34b44fc433763e0b4b914310f1eeefe7c0b86cd9678c91cbffa4555e484fd71d9c972381843ae569544495b4e77b6f745b47dc30fa7a6aa6f32c6c2af8a15046a0d3b4c49f8c67e59ab6e04149aab584439defad15935b8893f7fdff64758164adc851bdef973b589d505b9eac67fae816235406b0c1b6931c1a5166a58f17154b20f50093d6aaa935898df5b7d9c6b612ac96b8a08d63eb85733fe9bd59fc39be4e5be0cdf61b9319f0b995fa8db8808a0e285dee5354f347df165118b128a206a66849a3313c4585b59c9790cf94761d35314642d61d283292fddf14dbe087473b779318fbefa9bc8e6ccd62e506ed093e046bba1bdbaea6cd3fe4823adc746e80bd180ebde069052ba8cfd61deb3b423f70138d80e4ef17b1c7821c4df47c7e95d2940e6d73eb16243b39cfb570cc74b20234b52a0535c7f344bd95f3fe5e545bb239dc53d44671b1448100da80a3e9397013a244d47c66b57c7a9024889ec7a335dfeee20c8960e035e45bc1fcd0007cd1a3840eec67b6227820c7d14c51be44fc90cfc6ccdb38ee70aabc0d368ecc9650ec36ba7899b6032a2dfa194a4f2b15383018158ecf66132c268df6f7460d92cafd1a55e8af41b3f2bfbd78f61505d1c56075a05943ab39488a6d2b99722845af1ce92f2c36e0738146aff979ae3eb3d462cb57b115facb7b7ff33410f4ec6f903aa2a409625628a03ffe48111511a45d7bb890ca9ffdf5de5877e7f1096018a5d5b4dd2a14241e798b54ef1fe9bbd937adea8bdcc03b2ce38d3969ee05c59d5fede5e718d22f47f7485762b47d413658facc4a1a60a24c3491bb73f34e92d10e488182167e1b5c319ba5e039b45838fda48ae150200daac66d69800c4857337c9d6c80ad0c2eb63f7e3433df986724fe56de697740ac4cd6609b3645a7989b75f60a396cc008a419694c0d54d661805af0789e9f134f974474d7af9e8eec1bc24dc4739e22c66313909c0e5ba50e5e4fba9555ae85009c519e26b7610d385ad776212b34765efc9fee1a8540e4921d4543f294d861c06d68381f75af8c5ad46b75ef2f4236893ab439d8ef6dce4248505e30bd37225210bd9bccb7c89c243a014bcf0d83117f1346f60aa089f8b0c8624907f123afcac0b50a5ae9653c1fec1f798307b30f53380cf7691af135403d3078e9d490d5619b155a2d5d50bebb45a21315a7f8c02ee130b7cc98e762ce50e91d0561eb1ca9c32b08b8901c7cf4c94b8b246fd067d1d52ce2bb5efc8bdd2ac78b0ae06bc43169f00f33a400534b6958b480e39e3e33f0096c549a9599034bd5514ade80de724c261a43cdb13d10d294fd344c1a06c9cb11d4995f4e653122fbb130d0fdfe03fc486f5199de5b21e001d4c881bd65a778bd18707208205135eaa73dee076c65cfa75cfc50130d7be3097bfd6b2d8f64eb9a62526ac5dba19305838a7efea94ab5614130d0367b610d466ab3186d78d545cf7b14c3ccce6eea9b77ec29502f4bc79eb422a312b13d60e54c78332703224b066503d497a4eff34eebd0341daedaceb8ff2b790edda5d077d21cf237e7fd02da14a23e73626219c15ba3e047f5b50c3aa89ebda2477b74269efb30750f3a234e80f8d87ad7552b763516012f0b94b462664ca963c2283d18ac7223b29b0c28b14771e7214189a36324fe9b44408b6882c5df48e8276b119456d4615d9b3ba4e8cbfb7c8109760e771fde846c28b08f397a55a5a8a598adbf6731dddd2bb5427a7da2303145801f37e03d40c269b17ed9594fb519a1bcc72cf5e1aaaf0f107f38f4695127758ed6d3811a9d7e7d26a8607211f0f8b1f664e1c9f729a0c40c5e45fd508b7645dab0c7dbbf619e6d1527e4f63275d005284661bda2209faf2bebb6b8396388a4cf82a3d7e15195e8718b8426dab360f2795a693e1a136ba6e88f0890ef99475026f62ea79054158af7bb9da7cb6bda989c6465916827f1c608fc03444828b65210ddbd2d8f1edf40d0f02da9695d149ac474a5fa3dca108244a0accc803ddfa3ff59b6018103f813362282dfa4c2a6dd862cb779ccf65c7222bb1f4f5ec7aab678542f99b8c07d065f66aca15c17f975d2c1999b8eafec3efddd72f5d8523186cf5f38c9479da20e94a552ae21a2837dafd8d3b8c3dc7ef659baeb2df3e44f1ced911977d46188215c37997bc11a8f374822d307ce34a34748387df9d1605629d4f216119af427a3c155cd97962ee79725dc84905d7dc645e6d33f54683b96223a13ed9eabaa8c057ed247b3084d700387d8fea1420ee1fad40cedd7909f8e02857edef3bc18bdb65c49d139612514a85e6d60e2bffdcdebcfc736b16a9839488237db51bab9563c8ea7b125e75bdaf3b2f52a3561b722028bd655307d0002048e125f762f5a78eb51fca0d7458e1b8574762bd3f4b8eaf6151136241e182408f748875a5914eb127e5c63be0c000e252a9ef32bca2ecfb72aaee7a479d7ee4ea048f7b09dbeba81f36043be9f3c145ac4e70cabedfa38af3746ecc39643e30d2013fdd253081d0a5edc80cb75dc0cba2e81e7edd831fdc3c5450394f842230545bf42b28c3a5d54d782b3d39f7a05eed7935947ee771fdde63cd270c7c87467b75dbcc2d01fe678c4bf2d8f0982dd52e96708cf485bba9d84b6c6b0052fc3fed95b5a193ec18b07a2347effc7885185666647d51c5dddc915a24721c5d76aef59264820445d6ae212b3bd69273b9d628ee3f47e715a688127455feb886fffa97656cc0b87f6a0938d10fd30e4def37b5ff7517a899b00617b5a8d8f718ddf427ba31ebb270942e2b1b3b9028ff8b1c16d5cd9f0824bdbf40f81a0ace6c3531e03e7cc8249aa6ea0a8575750028e71b3c34543347aae41ff229f2dc4fc7edf13b37ae98eaee50d6fd1b92691863c206a3ad88ccac8b07a3fc57d2bde921f92840f5d1ba0ad55385d2a72e660acf1b7f6c6de5bd16179785b3149778c25d000d54e105da1e59186b48238eaf3134b4524408b15809f4f154032afed2173589ecae302dedc30d07d16d41e3187cb94670b21ad62284de209d440202e505f1eb225777d77e2ca44009e1fe239dd4fac6e90cbdeb6a59d0ba350b6520826a5bd5dd8757c82a029fe5fe6546ff96838f973878175f70f1a68f074a07be78ed072e078f93deb0e9246515daa4c93eeb586363dafdb85ddb9f4f512aae864249ac84133f849ae94aad8886a9bc0a78807c1b606132d1d2d3a6cacf976fd88d5510492ffc523bb728ef39a93fbc27772531703548ade4ddd4699dc238107dd44aaaa4518b3c132e6deb3c2f99b293c38dfa044bd230288e5ce7d0d620b11175f379b3f583fbe8ef88f1cfa6cbc750816c8392ac4bd5bbb4a9b1d40bdfb6efc8137f75966373d5d6888bc59731cb37a62fd7f13cd4bcbf0b60e2e94435bd7b229caef9aacca6460ef62aa36e057f3f4cdcb650c89b9d1c5665aea21e7dbf15300a6c41426ed88a187c583836810e3e112a88310473f7d4bcafce39be39d1b1ffe98fbf84de3db8e36d0a67093a91f7baf1621f847df4113086b701066fff26d58c520758f64f8fcca3b24d708c668528c5f382ad017edc720ee125ab0b0fbab30f8076a2d5ce039a424da003a0a742d6cb44480f1f6179d450d8f5415ed8952e8ff325a7ff7a89a74e6897b8ed63a0a6d3d5b6bb2758db2b431baa8d27b3cd623fb32be48a5f085d28f3c1db5b963611aeda94e039e82f209a6d11b1c0ce9390595a84ddd3fa6e96930a98c1177210082be5862933ec308261903fb1ff148910c828f04222b666b9e0c468bbeb642375e1b82e5608b2535c168db06682acf80199dcb3b5b991673aaf8e09ea41fc5e5664cebe855b2020840d7dac4b617fd04556b474df4491d5a7c9b7af96f01cea3eb93ff071afa4603dc19d97bb0b4d76fdbcdc94770c45624dd4c6c0f2f4938d0bd0534b1416e1a9e99d5df748d5bce8ef84abd10a04c9a8ef01e4df9ae1fa963e42a6b8feca354f0540d154fa0b6f102fddf95bc7a2fe225308c5fecff628177086e3570095b7d865469dc9c25763b5fa4367e8f64fb23215c8db924439322c5dee4b238d275c21ebf3f3c3694b34238b31f80a813265af481fc406417df835b8c1d99fcd7bc8c8330020ccd0d195466aa2d0370155571aae7d9dcfc97482d8070adc74c2824b44c3a1b19a997d0cda16ffa5bda251f1a1dc4de6347c2dd33e64852c890f8b654600ec7389e9a121c471c5da5521f93106b91fc314ee069926002d47e1599bf3ad468ab2fbd5547b4f86dda2dabd17e5a35668750bad2a4a8a43a40da52004289bd7ec76e53ea219c3976821a5b9ec90fa2631d584785713de0377b5a04501e98658bd3ba3196ca3fa8fbe022b872c8328bc0fa7da8f8bf31a0191fd7dd9bbb43ea90a19dc5ebf1d0d93c29e4c5d4025747c27841e4628ec9c7bfdc614fa752c344106fe769d53e3f53bde64ee095b3af6742993f764008e0aeedf79f719f2bc4a00210515651a0326c5bbf7718f47f57016aba7e9aa34823c2a30599b6e5a30726dca182ae77d41f517ca36c0ff218a987db7639cf63fa31e88f18485e79a71123c495f98053ab17387cf19fa6"}) r6 = dup3(r3, r2, 0x0) getpeername$unix(r2, &(0x7f00000011c0)=@abs, &(0x7f0000001240)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_delete(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000004ffe0, 0x0) [ 451.648716][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.658312][ T8825] device bridge_slave_1 entered promiscuous mode [ 451.792941][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.840301][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.862853][ T8727] Bluetooth: hci1: command 0x0409 tx timeout [ 451.877881][ T8980] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 452.040579][ T8825] team0: Port device team_slave_0 added [ 452.111192][ T8825] team0: Port device team_slave_1 added [ 452.335125][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.342593][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.369661][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.391158][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.398224][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.424520][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.504869][ T8825] device hsr_slave_0 entered promiscuous mode [ 452.518206][ T8825] device hsr_slave_1 entered promiscuous mode [ 452.529127][ T8825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.538251][ T8825] Cannot create hsr debugfs directory 11:39:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x400000010, 0x0, 0x0, 0x70a1}, 0x4) r1 = dup(r0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x6) 11:39:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 453.127097][ T8825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 453.162543][ T8825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 453.203064][ T8825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 453.225530][ T8825] netdevsim netdevsim1 netdevsim3: renamed from eth3 11:39:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:39:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:39:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x2000000002000980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 453.916614][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.942301][ T8727] Bluetooth: hci1: command 0x041b tx timeout [ 454.006148][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.015846][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.064693][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.129642][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 454.140087][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.149712][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.157187][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.222274][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 454.231972][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 454.242485][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.252083][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.259334][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.268622][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 454.347448][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 454.359044][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 454.369924][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 454.380497][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 454.391471][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 454.402567][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 454.412512][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.422372][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.432247][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.469052][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.583336][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 454.624612][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 454.638490][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.687544][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.783832][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 454.794128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 454.936901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 454.948370][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 454.980500][ T8825] device veth0_vlan entered promiscuous mode [ 454.995514][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.004995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.045328][ T8825] device veth1_vlan entered promiscuous mode [ 455.133369][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 455.143170][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 455.152934][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 455.163088][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 455.190334][ T8825] device veth0_macvtap entered promiscuous mode [ 455.217759][ T8825] device veth1_macvtap entered promiscuous mode [ 455.285087][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 455.295716][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.310186][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.319027][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 455.328872][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 455.339206][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 455.349587][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 455.375147][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 455.386638][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.400901][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.414804][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 455.425395][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.454106][ T8825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.468968][ T8825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.478470][ T8825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.487419][ T8825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.834956][ T8532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.843004][ T8532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.895580][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 455.953653][ T925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.961675][ T925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.971994][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 456.022549][ T12] Bluetooth: hci1: command 0x040f tx timeout 11:39:59 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x4c, 0x274, 0x208, 0x0, 0x2f8, 0x318, 0x318, 0x2f8, 0x318, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x48b) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="020608a02efaaa63fe7f81dc2f15f02d90bca4e0dc1b1028f0a0c0eef32c6d8e0c22d5597b74eb937adf479663046be314328c7bb63d2dd39db583ec2ff6c885ae62f1e9eb0855f2ab84ae3429a8093e42c4d9cb866f6eb34444ba38784a3771175c2f6330c6d2c8d75a"], 0x16) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@host, 0x5}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x200080, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000000c0)={&(0x7f00000008c0)={{@hyper, 0x9}, {@any, 0x6}, 0x400, "5338e452e893dc0012d77f8596306878b8a788520c6a8507810665d069e6237edf956c30f54eb3b218375aef943a64c0c39b5f93fb524054be8acad54cc7c16769c7dc2d0ad54905097a2455dff3af38cccf4ee19f95536e87867bda97e4d1e10e431d20ce8d3b2976f20c8b0adfadade205212816218203daee2a0fbff45088b2ba27cd6bbf36ec43ab1837398750c525937f8dcf4567c1164149f089001be87c96e56c9af121d76790e52e70d6857dbd5885c38c4d544110b83ae9f3aa8c4451bf3673f508c24c8296843712bc09fda117a79e07d8c6f50a5052d536d8a1f86d4c85e13c4809e2c2b45db5aa44885f79a85475b62432addcd3edf76b9750f77b20337052ecc8be0680a5b8573b1af8db4aaf7b9568f04405125f6b9fac704634824154d4009a3dda319a8301da236d55f1b8655f0797b8052ee821bcb6fb21eea359c66c5d42f9344292f18224db5c8126c381d8fcf259ad47ce09ff57955b3fc39dbd14b67dd5c189bf7ac49990a162fbb6c63bb942b1f61defae974fc67f999113fa23ba647ea4da1aa62ab111056971a0271f51e77d0e3137f3b75bd825a7974558423635925b9c83b6335f84b44ee6bf8981dee3ed1cdebfbfd3b0e61e5f06c63e5a08db8d419f91d09dde4327e83a33a615d14bd352763860492e0aafece32724fdb6f37ecd183366363fa6788bed7a63226a392910eeb923af9c848ddd116581817acf37d0a7430379632fb1035354bc9251a7f20872eaa6d6229d958ddfb61f4eb7bdc3de578eedc890d7c493b196ab9fab04156acbafff6f72d7e314f3d762872cff9744b8da433c47f564dc84cbdaf97dcb4fece9d05ec191a02e946579ac14b4fd04302ccd653a68d04d03c715aa2899bdffdb27592860e7177036ce2bac15ef6b5ae8510c83e8fb0f8a1bf8240e4d630f23096faf676eeb187bcc459eabfc6957f0f8328616e66794a5f4f578e4ee96a4bc18d7771a9a054092f86c078d17bd0759e0286ac99f815dc923812edc5fdc0cb67b6caf50c5ee67f5e110089f664bbe8f7e6aad71e89af32f426c71f76a647809bf1608bc665227230e705915544442a1b9f51d2afa351a42e662d4f1ced6bcdfef0b9136ad05a8817139c74ac4559e2a888da9fd63df1f3ead357ebdf815adc713302cc5c56a8944111893d2f3a98dc7cac8805a43f8d1518b68698d86badadc6b31b045da8c3e70850ff41ec7c13bd2cf92a1289adb8a7c7944e10f1405f9021790976d11aaae04cf451ce9aac3d7983175ab5b0284546d61ef338ab3ada77088d173c93ae41dfd2d74bf916b8f5c43659b61328b49489aa290c677a8eec20438c73c856e7cc3d36892b38c9b6c6b6645d8513bb32aa7a28daf324346596efe76cfd701186600f75a367b5197c45bb1909613da01d7f3d067823728f04dc9ccc0b65e64ccc1c09b"}, 0x418, 0x1000}) r2 = signalfd(r0, &(0x7f0000000000)={[0x400000]}, 0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KDENABIO(r1, 0x4b36) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) 11:39:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 456.715760][ T9106] xt_CT: You must specify a L4 protocol and not use inversions on it 11:40:00 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x4c, 0x274, 0x208, 0x0, 0x2f8, 0x318, 0x318, 0x2f8, 0x318, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x48b) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="020608a02efaaa63fe7f81dc2f15f02d90bca4e0dc1b1028f0a0c0eef32c6d8e0c22d5597b74eb937adf479663046be314328c7bb63d2dd39db583ec2ff6c885ae62f1e9eb0855f2ab84ae3429a8093e42c4d9cb866f6eb34444ba38784a3771175c2f6330c6d2c8d75a"], 0x16) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@host, 0x5}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x200080, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000000c0)={&(0x7f00000008c0)={{@hyper, 0x9}, {@any, 0x6}, 0x400, "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"}, 0x418, 0x1000}) r2 = signalfd(r0, &(0x7f0000000000)={[0x400000]}, 0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KDENABIO(r1, 0x4b36) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 456.942180][ T9113] xt_CT: You must specify a L4 protocol and not use inversions on it 11:40:00 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:00 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x4c, 0x274, 0x208, 0x0, 0x2f8, 0x318, 0x318, 0x2f8, 0x318, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x48b) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="020608a02efaaa63fe7f81dc2f15f02d90bca4e0dc1b1028f0a0c0eef32c6d8e0c22d5597b74eb937adf479663046be314328c7bb63d2dd39db583ec2ff6c885ae62f1e9eb0855f2ab84ae3429a8093e42c4d9cb866f6eb34444ba38784a3771175c2f6330c6d2c8d75a"], 0x16) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@host, 0x5}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x200080, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000000c0)={&(0x7f00000008c0)={{@hyper, 0x9}, {@any, 0x6}, 0x400, "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"}, 0x418, 0x1000}) r2 = signalfd(r0, &(0x7f0000000000)={[0x400000]}, 0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KDENABIO(r1, 0x4b36) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 457.204352][ T9117] xt_CT: You must specify a L4 protocol and not use inversions on it 11:40:00 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x12002) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RGETATTR(r4, &(0x7f0000000380)={0xa0, 0x19, 0x0, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r6, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) ioctl$TUNSETOWNER(r3, 0x400454cc, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x7c8b3, 0xffffffffffffffff, 0xfeffffffff030000) [ 457.618773][ T9124] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:40:01 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 458.113417][ T12] Bluetooth: hci1: command 0x0419 tx timeout 11:40:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x12002) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RGETATTR(r4, &(0x7f0000000380)={0xa0, 0x19, 0x0, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r6, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) ioctl$TUNSETOWNER(r3, 0x400454cc, r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x7c8b3, 0xffffffffffffffff, 0xfeffffffff030000) 11:40:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 11:40:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 11:40:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 11:40:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000400)={{0x0, @multicast2, 0x4e23, 0x0, 'ovf\x00', 0x8, 0xaf, 0x2a}, {@loopback, 0x4e24, 0x2, 0x1, 0x4, 0xff}}, 0x44) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x44}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x54}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\"\a\x00\x00\x00\x00'], 0x24}}, 0x0) 11:40:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 460.360580][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.390274][ T9154] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 460.421682][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:40:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 11:40:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 461.273199][ T9165] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 461.420742][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.486210][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:40:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 461.692189][ T9181] xt_hashlimit: overflow, try lower: 0/0 11:40:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:05 executing program 1: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x4}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap$dsp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b3172000000000100000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000008000000000000000000000002000000000000000000000000000000000000000715b97caaebe6f6000"/120], 0x78) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000940)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0x841}], 0x1) futex(&(0x7f0000000980)=0x1, 0x8b, 0x0, &(0x7f00000009c0)={0x0, 0x3938700}, &(0x7f0000000a00)=0x1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xf2f1b000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) [ 462.031112][ T9187] xt_hashlimit: overflow, try lower: 0/0 [ 462.057871][ C0] sd 0:0:1:0: [sg0] tag#1228 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.068601][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB: Test Unit Ready [ 462.075421][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.085362][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.095257][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.105184][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.115062][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.124926][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.134808][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.144681][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.154549][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.164440][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.174332][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.184242][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.194111][ C0] sd 0:0:1:0: [sg0] tag#1228 CDB[c0]: 00 00 00 00 00 00 00 00 11:40:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x3c5a, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 462.607483][ T9195] xt_hashlimit: overflow, try lower: 0/0 [ 462.839780][ C0] sd 0:0:1:0: [sg0] tag#1229 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.839934][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB: Test Unit Ready [ 462.840035][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840135][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840234][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840329][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840428][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840527][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11:40:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 462.840626][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840722][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840821][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.840925][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.841025][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.841121][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.841206][ C0] sd 0:0:1:0: [sg0] tag#1229 CDB[c0]: 00 00 00 00 00 00 00 00 11:40:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 11:40:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 11:40:10 executing program 1: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x4}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap$dsp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b3172000000000100000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000008000000000000000000000002000000000000000000000000000000000000000715b97caaebe6f6000"/120], 0x78) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000940)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)="2089d040db8cd647561bb7c139f65d6388b3ad8de4b1625305d0ef8cf56b34bfd2baf2ea0b74dc4809641e011d746b4cb7735bf0f4b8248dbdcc8f12d4858accc321e83a9e3965d411713774df0aa7ed73d5868ff3fa817e1e0a13405c55b225049bd74dd4d5c5868075e9a727d43747448b34214dd9813dd9f611f766a6443687d5d7ef5eee82f468f12a26a884990f60c844d559c96b3b04797e3d7c052fb6e12ffa39359561626469de2ab221ac2f809dc1502b7ee8f13bde3194caba4f578fcd2e598b96aa524f472a9f11ffe61c3b0053cbe3ba4d60dbd3e73ee10922467a208ff44c7d5e28a1b78066bba6e267065821b86764c3e53b931a53ea1c303f11bf0e57a3e4d3222528f873fd84a86319cd01081461dec33cd44cb6c9bd6cded9d2d6f91f29f018ff3ed69b183d9d5a6a5cfc712fd904e002fc572f4525f5f75638ce074ebf62a35eb0f69b84ca564610ea97a4e9c0faf98cd56235168a15ee5111f3d29871d9283e7dd80c9b146ffcd62eb8273e578345a94fdd79bf15ece195ac78d38a5a6d960ba3bac6b2bec620c830cb42cc47a3cc65dbc52210f4474a88ddc341c72a6818721fb4d64b7c83c1c3a3e2878bb4aba8ed67104b443251d9eabf71b204fa893a7673bc2b0f9ee84b553dd3560c7e64af8f044b3bc05cb3bdf98418fb68f14dcabf7bf5940ea3df9359a9e744ff98ba79c31017956749af1d29524608c1bc09d0a27c55c9ae46d5ab9fea74bfddb2e03ac990c2445520e4f934510d901467a346bd395268ba708f2cc3fad9c9a2dd8e1ed0176d782de685b034882ef324efe51c75ed0cddc509bb832b26b52886398e1d471e1f2bf718c877cfe12b7330c007501544979b2c74ee9ea2ff9ed784fac5dff82d09ce78cfd342b7c919c49b1b9f8daac850fbed2b62a455f09d6c8cafe82a639bb58f4c3d8b8941b06b6a7b311cb43d9c50a52cb7e2ba200f6cb73c48a986238560112cfda1885c9af1b65c513b2b1dd60f381f7b7a95641ee0bf8c86376331886a23d254d46f212d2c31448f73cca1b92af4c0596c14863d5a71c4d42d51443db8729a3d5ac0c253e31cda61fb1fe2a13bcab7137830baeba27187aaad44aed3102083fd9e6478cd44005688053082f330d4443b3c1ffa871df14b61c87e1aa4783471dcb70a4c52ef254600062fd5507e291f0f4e8b0955409657e8d421b08f41f7faf548cd433a7e580d5a5cb44540911dafa07be145d1ea40d40f84432561fb61599852c87078f9be007412c41ecfc9220b152a3e9eb33a499da0fba18901f79620e323b8dc24f7ec2cee5246db59363959a2839c74d954552b752ba889a0d2673042a634cc13e204281570e803fb92fc259bfa78b715c22f0ee096e47bfb4fcf4e0c5d0f42dcf26a19f91d4306ec4f1de298759ca0ed70f879e75bd9a867dc3be807a4f5f2497f219c2cec9f71f91404ee1efe1d63a5db6ed08609e886f3ec7ffd08ec62ef2c9da76b10e424b76bff20be6c49f4a14c23507eba389534ce2ef031f8f936a4138285e3982b88fa0f3986d7517010b43397eebe0179ca40ede6e572cf2d77de505d025260b8779d0559ef3ecfa1e7b7b8f95b0bee9525440885e63e939aaf325362fea87855417d77cab5d2e8c516c24a419b9c8e93e3dc8b48f70890c65ec6cda75f3883bc708f95dfbc9fdc674ede914d7e26ba0b9a64fa852e52211a527da04c851532c641ed213cfedb1fe048336aeb66ffedf569160dc90acbf9ddb141d1d95e4aae6d41acccf63dfab0b0b200df487f19022380debb7b9b5a6d22b64d0b58eb2a959b9876f90d09f2cbc2c4045f01bc6a45b30f24d20a40028fa75bb8545b37bf0bb127bf962b0cfb779d5181cfeb2a2da37315ad228ed17593dc6b21ce7d67dff287d94e5fc2ee4a9d0c7f73ff84475910ea6fc5b281d3c43111326497507250ba215b6c7bb79df8eaffe76380c2e5ac00a5664aae26ddeddc341ab5fbb84fe4111e171875dcc9227bb394374f44ad5f70f76fe6f6ab3b9289f31169b170889ba3be68335ab46806571cd0b30764fe470da46c00d18cd9b2e8a9aa885dea5bd9826e51dbf61834cfce02602467e021949a76eba3e98295972ee751c02d29ecdb12b21339e02fd520f6377c657c1a77fe4550f642a46216211e688cd6f8cc756d6c48feda15f5d43edd0a9690a2608361563e253848603e4c98ff8ed8e66329d1db2eb70bb7ce30dbfd085e707a846a1756f02c230f6579185887df2d743a05234be67901fc3f706aea307d5891c6f74f3bcb30402b9aabf6ee92ffc9f321217445b05c68dab770f2c34f75d73f0620f859a3a84e58fbb4a5e54dee1400272df590255dd14acee54937d0d666d84c370a1ca653e547650dc11bb158a7bad528468bf8f17f1f7d838c0299a74501a02f89156dff56193f263733cefa201109b65fff84427259c0caa853d0616282b8f5496ea8b35960dd57c8697d35b386668899eadbf4636d9e547e5c44aa9b02c8c57b6ef58e9e82d73865e654fd4a0cdb52fabbb6df8b226101f3886d471d2477f22f7907adf9604447f658308836dc2776b527972c4774473c5d2de033f9c34c6216c74444c4d5c19a29b9ae492f4ad8ce1884979cf8194c6029c80b88bf76f3540747ccc5357d9899de8ca17e89b07df18cead341294d348c76b8b3975ecaaf8b672855d52e731ab9ff991e07c93376c62caa81623e7a65f72c4337cfbe002b55d069a6d27f601b437826a2f2a4e4402c2992f6f5b2a836b0abce9a25582c012f3831fbbea401f341b59e35fd3f9673f0e9ab71d97a0db73811361b317be2f6b5b70465cef09836aea7dd6d855d1bd29d066886c0283629ffd27cfdb485f733c5f9905ac2ea0fa931de716ead5c0b8a646839d729e853eadd8f82b70705ae0b225f9f28b6b018fc13e99c33f6a4077f51759ecbe2a412941315f8b854ef16febc102c133a15ca0adf6a457ea160", 0x841}], 0x1) futex(&(0x7f0000000980)=0x1, 0x8b, 0x0, &(0x7f00000009c0)={0x0, 0x3938700}, &(0x7f0000000a00)=0x1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xf2f1b000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) [ 466.929261][ C0] sd 0:0:1:0: [sg0] tag#1230 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 466.940061][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB: Test Unit Ready [ 466.946870][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.956710][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.966548][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.976433][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.986263][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.996086][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.005918][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.015744][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11:40:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) [ 467.025565][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.035409][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.045244][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.055068][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.064898][ C0] sd 0:0:1:0: [sg0] tag#1230 CDB[c0]: 00 00 00 00 00 00 00 00 11:40:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 467.948879][ T9236] Cannot find add_set index 0 as target 11:40:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 468.510710][ T9239] Cannot find add_set index 0 as target 11:40:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 469.017743][ T9241] Cannot find add_set index 0 as target [ 469.600457][ T9245] Cannot find del_set index 0 as target [ 470.050164][ T9248] Cannot find del_set index 0 as target 11:40:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:14 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:14 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 470.541986][ T9250] Cannot find del_set index 0 as target [ 470.897003][ T9253] FAULT_INJECTION: forcing a failure. [ 470.897003][ T9253] name failslab, interval 1, probability 0, space 0, times 1 [ 470.897069][ T9253] CPU: 1 PID: 9253 Comm: syz-executor.0 Not tainted 5.9.0-rc4-syzkaller #0 [ 470.897103][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.897128][ T9253] Call Trace: [ 470.897349][ T9253] dump_stack+0x21c/0x280 [ 470.897469][ T9253] should_fail+0x8b7/0x9e0 [ 470.897595][ T9253] __should_failslab+0x1f6/0x290 [ 470.897697][ T9253] should_failslab+0x29/0x70 [ 470.897765][ T9253] slab_pre_alloc_hook+0xd5/0x590 [ 470.897857][ T9253] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.897921][ T9253] __kmalloc_node+0x1d4/0x12b0 [ 470.898006][ T9253] ? kmsan_set_origin_checked+0x95/0xf0 [ 470.898076][ T9253] ? kvmalloc_node+0x205/0x490 [ 470.898158][ T9253] ? kmsan_get_metadata+0x116/0x180 11:40:14 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 470.898237][ T9253] kvmalloc_node+0x205/0x490 [ 470.898366][ T9253] xt_alloc_table_info+0xda/0x1b0 [ 470.898474][ T9253] do_ip6t_set_ctl+0x12e3/0x56c0 [ 470.898586][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 470.898664][ T9253] ? kmsan_set_origin_checked+0x95/0xf0 [ 470.898744][ T9253] ? cleanup_entry+0x5f0/0x5f0 [ 470.898877][ T9253] nf_setsockopt+0x588/0x5e0 [ 470.899037][ T9253] ipv6_setsockopt+0x9e56/0xaed0 [ 470.899149][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 470.899233][ T9253] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.899317][ T9253] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 470.899430][ T9253] ? aa_label_sk_perm+0x7ed/0x9b0 [ 470.899509][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 470.899587][ T9253] ? kmsan_internal_set_origin+0x75/0xb0 [ 470.899672][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 470.899757][ T9253] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.899842][ T9253] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 470.899959][ T9253] ? __fsnotify_parent+0xfc6/0xff0 [ 470.900034][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 470.900116][ T9253] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.900196][ T9253] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 470.900266][ T9253] ? aa_sk_perm+0x7da/0xe70 [ 470.900343][ T9253] ? kmsan_get_metadata+0x116/0x180 [ 470.900432][ T9253] ? ipv6_update_options+0x5e0/0x5e0 [ 470.900560][ T9253] tcp_setsockopt+0x239/0x270 [ 470.900651][ T9253] ? tcp_sock_set_keepcnt+0x150/0x150 [ 470.900762][ T9253] sock_common_setsockopt+0x16c/0x1b0 [ 470.900847][ T9253] ? sock_common_recvmsg+0x2a0/0x2a0 [ 470.900907][ T9253] __sys_setsockopt+0x951/0xdd0 [ 470.901000][ T9253] __se_sys_setsockopt+0xdd/0x100 [ 470.901071][ T9253] __x64_sys_setsockopt+0x62/0x80 [ 470.901166][ T9253] do_syscall_64+0x9f/0x140 [ 470.901302][ T9253] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 470.901344][ T9253] RIP: 0033:0x45e179 [ 470.901417][ T9253] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.901453][ T9253] RSP: 002b:00007fd7a1fe9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 470.901519][ T9253] RAX: ffffffffffffffda RBX: 000000000002e240 RCX: 000000000045e179 [ 470.901560][ T9253] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 470.901604][ T9253] RBP: 00007fd7a1fe9ca0 R08: 0000000000000398 R09: 0000000000000000 [ 470.901646][ T9253] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000000 [ 470.901693][ T9253] R13: 000000000169fb6f R14: 00007fd7a1fea9c0 R15: 000000000118cf4c [ 471.358350][ T9256] FAULT_INJECTION: forcing a failure. [ 471.358350][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 471.358414][ T9256] CPU: 0 PID: 9256 Comm: syz-executor.0 Not tainted 5.9.0-rc4-syzkaller #0 [ 471.358457][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.358477][ T9256] Call Trace: [ 471.358555][ T9256] dump_stack+0x21c/0x280 [ 471.358630][ T9256] should_fail+0x8b7/0x9e0 [ 471.358721][ T9256] __should_failslab+0x1f6/0x290 [ 471.358789][ T9256] should_failslab+0x29/0x70 [ 471.358852][ T9256] slab_pre_alloc_hook+0xd5/0x590 [ 471.358939][ T9256] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.359005][ T9256] __kmalloc_node+0x1d4/0x12b0 [ 471.359082][ T9256] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 471.359143][ T9256] ? should_fail+0x208/0x9e0 [ 471.359212][ T9256] ? kvmalloc_node+0x205/0x490 [ 471.359292][ T9256] kvmalloc_node+0x205/0x490 [ 471.359364][ T9256] ? kmsan_set_origin_checked+0x95/0xf0 [ 471.359446][ T9256] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 471.359524][ T9256] xt_alloc_entry_offsets+0xcf/0x100 [ 471.359592][ T9256] translate_table+0x1a8/0x3df0 [ 471.359650][ T9256] ? __kmalloc_node+0xb0d/0x12b0 [ 471.359717][ T9256] ? kmsan_set_origin_checked+0x95/0xf0 [ 471.359800][ T9256] ? kmsan_get_metadata+0x116/0x180 [ 471.359871][ T9256] ? kmsan_set_origin_checked+0x95/0xf0 [ 471.359947][ T9256] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 471.360039][ T9256] do_ip6t_set_ctl+0x4672/0x56c0 [ 471.360145][ T9256] ? kmsan_get_metadata+0x116/0x180 [ 471.360218][ T9256] ? kmsan_set_origin_checked+0x95/0xf0 [ 471.360292][ T9256] ? cleanup_entry+0x5f0/0x5f0 [ 471.360367][ T9256] nf_setsockopt+0x588/0x5e0 [ 471.360473][ T9256] ipv6_setsockopt+0x9e56/0xaed0 [ 471.360581][ T9256] ? kmsan_get_metadata+0x116/0x180 [ 471.360665][ T9256] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.360749][ T9256] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.360831][ T9256] ? aa_label_sk_perm+0x7ed/0x9b0 [ 471.360908][ T9256] ? kmsan_get_metadata+0x116/0x180 [ 471.360986][ T9256] ? kmsan_internal_set_origin+0x75/0xb0 [ 471.361074][ T9256] ? kmsan_get_metadata+0x116/0x180 [ 471.361159][ T9256] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.361241][ T9256] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.361317][ T9256] ? __fsnotify_parent+0xfc6/0xff0 [ 471.361393][ T9256] ? kmsan_get_metadata+0x116/0x180 [ 471.361486][ T9256] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.361571][ T9256] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.361645][ T9256] ? aa_sk_perm+0x7da/0xe70 [ 471.361728][ T9256] ? kmsan_get_metadata+0x116/0x180 [ 471.361810][ T9256] ? ipv6_update_options+0x5e0/0x5e0 [ 471.361896][ T9256] tcp_setsockopt+0x239/0x270 [ 471.361993][ T9256] ? tcp_sock_set_keepcnt+0x150/0x150 [ 471.362078][ T9256] sock_common_setsockopt+0x16c/0x1b0 [ 471.362174][ T9256] ? sock_common_recvmsg+0x2a0/0x2a0 [ 471.362239][ T9256] __sys_setsockopt+0x951/0xdd0 [ 471.362324][ T9256] __se_sys_setsockopt+0xdd/0x100 [ 471.362399][ T9256] __x64_sys_setsockopt+0x62/0x80 [ 471.362493][ T9256] do_syscall_64+0x9f/0x140 [ 471.362582][ T9256] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.362626][ T9256] RIP: 0033:0x45e179 [ 471.362704][ T9256] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.362743][ T9256] RSP: 002b:00007fd7a1fe9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 471.362812][ T9256] RAX: ffffffffffffffda RBX: 000000000002e240 RCX: 000000000045e179 [ 471.362854][ T9256] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 471.362900][ T9256] RBP: 00007fd7a1fe9ca0 R08: 0000000000000398 R09: 0000000000000000 [ 471.362943][ T9256] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 471.362992][ T9256] R13: 000000000169fb6f R14: 00007fd7a1fea9c0 R15: 000000000118cf4c [ 471.705940][ T9259] FAULT_INJECTION: forcing a failure. [ 471.705940][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 472.263378][ T9259] CPU: 0 PID: 9259 Comm: syz-executor.0 Not tainted 5.9.0-rc4-syzkaller #0 [ 472.263413][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.263435][ T9259] Call Trace: [ 472.263524][ T9259] dump_stack+0x21c/0x280 [ 472.263604][ T9259] should_fail+0x8b7/0x9e0 [ 472.263704][ T9259] __should_failslab+0x1f6/0x290 [ 472.263777][ T9259] should_failslab+0x29/0x70 [ 472.263845][ T9259] slab_pre_alloc_hook+0xd5/0x590 [ 472.263944][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.264016][ T9259] kmem_cache_alloc_node_trace+0x12d/0xdc0 [ 472.264098][ T9259] ? __msan_get_context_state+0x9/0x20 [ 472.264270][ T9259] ? __get_vm_area_node+0x3ee/0x920 [ 472.264383][ T9259] ? find_next_bit+0x307/0x340 [ 472.264457][ T9259] ? kmsan_get_metadata+0x4f/0x180 [ 472.264545][ T9259] __get_vm_area_node+0x3ee/0x920 [ 472.264634][ T9259] __vmalloc_node_range+0x30f/0x1400 [ 472.264749][ T9259] ? hashlimit_mt_check_common+0x1790/0x2750 [ 472.264849][ T9259] vmalloc+0xe0/0xf0 [ 472.264946][ T9259] ? hashlimit_mt_check_common+0x1790/0x2750 [ 472.265020][ T9259] ? hashlimit_mt_check_common+0x1790/0x2750 [ 472.265095][ T9259] hashlimit_mt_check_common+0x1790/0x2750 [ 472.265197][ T9259] hashlimit_mt_check_v1+0x3a4/0x530 [ 472.265280][ T9259] ? hashlimit_mt_v1+0x4f0/0x4f0 [ 472.265355][ T9259] xt_check_match+0x15b7/0x1930 [ 472.265466][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.265542][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.265611][ T9259] translate_table+0x2ae6/0x3df0 [ 472.265731][ T9259] do_ip6t_set_ctl+0x4672/0x56c0 [ 472.265841][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.265924][ T9259] ? kmsan_set_origin_checked+0x95/0xf0 [ 472.266004][ T9259] ? cleanup_entry+0x5f0/0x5f0 [ 472.266081][ T9259] nf_setsockopt+0x588/0x5e0 [ 472.266181][ T9259] ipv6_setsockopt+0x9e56/0xaed0 [ 472.266298][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.448681][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.448767][ T9259] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.448847][ T9259] ? aa_label_sk_perm+0x7ed/0x9b0 [ 472.448931][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.449008][ T9259] ? kmsan_internal_set_origin+0x75/0xb0 [ 472.449091][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.449175][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.449258][ T9259] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.449336][ T9259] ? __fsnotify_parent+0xfc6/0xff0 [ 472.449429][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.449515][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.449597][ T9259] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.449671][ T9259] ? aa_sk_perm+0x7da/0xe70 [ 472.449753][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.449840][ T9259] ? ipv6_update_options+0x5e0/0x5e0 [ 472.449932][ T9259] tcp_setsockopt+0x239/0x270 [ 472.450030][ T9259] ? tcp_sock_set_keepcnt+0x150/0x150 [ 472.450104][ T9259] sock_common_setsockopt+0x16c/0x1b0 [ 472.450184][ T9259] ? sock_common_recvmsg+0x2a0/0x2a0 [ 472.450242][ T9259] __sys_setsockopt+0x951/0xdd0 [ 472.450320][ T9259] __se_sys_setsockopt+0xdd/0x100 [ 472.450393][ T9259] __x64_sys_setsockopt+0x62/0x80 [ 472.450475][ T9259] do_syscall_64+0x9f/0x140 [ 472.450557][ T9259] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.450601][ T9259] RIP: 0033:0x45e179 [ 472.450673][ T9259] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.450712][ T9259] RSP: 002b:00007fd7a1fe9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.450780][ T9259] RAX: ffffffffffffffda RBX: 000000000002e240 RCX: 000000000045e179 [ 472.450822][ T9259] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 472.450864][ T9259] RBP: 00007fd7a1fe9ca0 R08: 0000000000000398 R09: 0000000000000000 [ 472.450910][ T9259] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 [ 472.450958][ T9259] R13: 000000000169fb6f R14: 00007fd7a1fea9c0 R15: 000000000118cf4c [ 472.451236][ T9259] syz-executor.0: vmalloc: allocation failure: 65736 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 472.451346][ T9259] CPU: 0 PID: 9259 Comm: syz-executor.0 Not tainted 5.9.0-rc4-syzkaller #0 [ 472.451379][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.451400][ T9259] Call Trace: [ 472.451475][ T9259] dump_stack+0x21c/0x280 [ 472.451543][ T9259] warn_alloc+0x4cc/0x680 [ 472.451651][ T9259] ? __get_vm_area_node+0x42d/0x920 [ 472.451743][ T9259] __vmalloc_node_range+0x10bf/0x1400 [ 472.451842][ T9259] vmalloc+0xe0/0xf0 [ 472.451932][ T9259] ? hashlimit_mt_check_common+0x1790/0x2750 [ 472.452006][ T9259] ? hashlimit_mt_check_common+0x1790/0x2750 [ 472.452087][ T9259] hashlimit_mt_check_common+0x1790/0x2750 [ 472.452187][ T9259] hashlimit_mt_check_v1+0x3a4/0x530 [ 472.452268][ T9259] ? hashlimit_mt_v1+0x4f0/0x4f0 [ 472.452342][ T9259] xt_check_match+0x15b7/0x1930 [ 472.452451][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.452533][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.452603][ T9259] translate_table+0x2ae6/0x3df0 [ 472.452724][ T9259] do_ip6t_set_ctl+0x4672/0x56c0 [ 472.452832][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.452912][ T9259] ? kmsan_set_origin_checked+0x95/0xf0 [ 472.452990][ T9259] ? cleanup_entry+0x5f0/0x5f0 [ 472.453065][ T9259] nf_setsockopt+0x588/0x5e0 [ 472.453159][ T9259] ipv6_setsockopt+0x9e56/0xaed0 [ 472.453260][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.453338][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.453415][ T9259] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.453491][ T9259] ? aa_label_sk_perm+0x7ed/0x9b0 [ 472.453555][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.453626][ T9259] ? kmsan_internal_set_origin+0x75/0xb0 [ 472.453705][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.453836][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.453926][ T9259] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.454001][ T9259] ? __fsnotify_parent+0xfc6/0xff0 [ 472.454068][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.454141][ T9259] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.454214][ T9259] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.454284][ T9259] ? aa_sk_perm+0x7da/0xe70 [ 472.454362][ T9259] ? kmsan_get_metadata+0x116/0x180 [ 472.454436][ T9259] ? ipv6_update_options+0x5e0/0x5e0 [ 472.454513][ T9259] tcp_setsockopt+0x239/0x270 [ 472.454604][ T9259] ? tcp_sock_set_keepcnt+0x150/0x150 [ 472.454679][ T9259] sock_common_setsockopt+0x16c/0x1b0 [ 472.454757][ T9259] ? sock_common_recvmsg+0x2a0/0x2a0 [ 472.454817][ T9259] __sys_setsockopt+0x951/0xdd0 [ 472.454895][ T9259] __se_sys_setsockopt+0xdd/0x100 [ 472.454974][ T9259] __x64_sys_setsockopt+0x62/0x80 [ 472.455055][ T9259] do_syscall_64+0x9f/0x140 [ 472.455135][ T9259] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.455175][ T9259] RIP: 0033:0x45e179 [ 472.455248][ T9259] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.455286][ T9259] RSP: 002b:00007fd7a1fe9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.455349][ T9259] RAX: ffffffffffffffda RBX: 000000000002e240 RCX: 000000000045e179 [ 472.455386][ T9259] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 472.455430][ T9259] RBP: 00007fd7a1fe9ca0 R08: 0000000000000398 R09: 0000000000000000 [ 472.455468][ T9259] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000002 [ 472.455510][ T9259] R13: 000000000169fb6f R14: 00007fd7a1fea9c0 R15: 000000000118cf4c [ 472.455616][ T9259] Mem-Info: [ 472.455768][ T9259] active_anon:201 inactive_anon:159205 isolated_anon:0 [ 472.455768][ T9259] active_file:5849 inactive_file:25445 isolated_file:0 [ 472.455768][ T9259] unevictable:0 dirty:70 writeback:0 [ 472.455768][ T9259] slab_reclaimable:8555 slab_unreclaimable:12696 [ 472.455768][ T9259] mapped:25484 shmem:5056 pagetables:988 bounce:0 [ 472.455768][ T9259] free:264213 free_pcp:617 free_cma:0 [ 472.455934][ T9259] Node 0 active_anon:804kB inactive_anon:636820kB active_file:23256kB inactive_file:101780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101936kB dirty:280kB writeback:0kB shmem:20224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 413696kB writeback_tmp:0kB kernel_stack:4032kB all_unreclaimable? no 11:40:16 executing program 2: getsockname$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x7, 0x96c, 0xff}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x83a, 0xffffffffffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x80) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x100000001, 0x94002) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x101100, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000002c0)=')\\*@()\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x1, 'nr0\x00', {}, 0x1ff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x28, &(0x7f0000000340)}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000400)=0x154, 0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000480)={0x6, 0x118, 0xfa00, {{0x7, 0x4, "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", 0x3f, 0x5, 0x1, 0x3, 0x20, 0x3, 0x6, 0x1}}}, 0x120) getsockname$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @multicast2}, &(0x7f0000000600)=0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r6, 0x2, 0x4, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040044) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000780)) connect$l2tp(r3, &(0x7f00000007c0)={0x2, 0x0, @local}, 0x10) [ 472.456082][ T9259] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:0kB all_unreclaimable? no [ 472.456100][ T9259] Node 0 DMA free:4096kB min:172kB low:212kB high:252kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.456270][ T9259] lowmem_reserve[]: 0 892 1124 1124 1124 [ 472.456348][ T9259] Node 0 DMA32 free:137248kB min:38796kB low:48492kB high:58188kB reserved_highatomic:0KB active_anon:64kB inactive_anon:600292kB active_file:1528kB inactive_file:80488kB unevictable:0kB writepending:220kB present:3129332kB managed:917732kB mlocked:0kB pagetables:1488kB bounce:0kB free_pcp:1980kB local_pcp:620kB free_cma:0kB [ 472.456522][ T9259] lowmem_reserve[]: 0 0 232 232 232 [ 472.456596][ T9259] Node 0 Normal free:12608kB min:10088kB low:12608kB high:15128kB reserved_highatomic:0KB active_anon:740kB inactive_anon:36528kB active_file:21728kB inactive_file:21292kB unevictable:0kB writepending:60kB present:786432kB managed:237568kB mlocked:0kB pagetables:2460kB bounce:0kB free_pcp:488kB local_pcp:336kB free_cma:0kB [ 472.456834][ T9259] lowmem_reserve[]: 0 0 0 0 0 [ 472.456932][ T9259] Node 1 Normal free:902900kB min:41052kB low:51312kB high:61572kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:966656kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.457103][ T9259] lowmem_reserve[]: 0 0 0 0 0 [ 472.457187][ T9259] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 472.457420][ T9259] Node 0 DMA32: 125*4kB (UME) 54*8kB (UME) 191*16kB (UME) 112*32kB (UME) 55*64kB (UME) 22*128kB (UME) 12*256kB (UME) 5*512kB (UM) 5*1024kB (UM) 3*2048kB (UME) 26*4096kB (M) = 137300kB [ 472.457766][ T9259] Node 0 Normal: 80*4kB (M) 58*8kB (UME) 41*16kB (UME) 5*32kB (UE) 4*64kB (U) 4*128kB (UE) 14*256kB (U) 9*512kB (U) 2*1024kB (UE) 0*2048kB 0*4096kB = 12608kB [ 472.458098][ T9259] Node 1 Normal: 7*4kB (UE) 7*8kB (UME) 6*16kB (UME) 4*32kB (UME) 5*64kB (UME) 3*128kB (ME) 1*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (M) 219*4096kB (M) = 902900kB [ 472.458479][ T9259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.458529][ T9259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 472.458580][ T9259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.458630][ T9259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 472.458651][ T9259] 35971 total pagecache pages [ 472.458675][ T9259] 0 pages in swap cache [ 472.458714][ T9259] Swap cache stats: add 0, delete 0, find 0/0 [ 472.458733][ T9259] Free swap = 0kB [ 472.458752][ T9259] Total swap = 0kB [ 472.458774][ T9259] 1965979 pages RAM [ 472.458794][ T9259] 0 pages HighMem/MovableOnly [ 472.458814][ T9259] 1434466 pages reserved [ 472.458833][ T9259] 0 pages cma reserved 11:40:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:18 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x1, 0x0) close(r3) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x1f, 0x466}, 0x8) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000100)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {0x0, 0x0, 0x3}, {0x0, 0xff, 0x2}, 0x2}, {0x0, 0x0, {0x1, 0xff, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0x2}, {0x1, 0x1, {0x2, 0x1}, {0x2, 0xf0}, 0x0, 0xfd}, {0x2, 0x0, {0x1, 0xf0, 0x4}, {0x0, 0x0, 0x2}, 0xff, 0x1fa}], 0x80) r6 = socket$unix(0x1, 0x5, 0x0) connect(r6, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) shutdown(r0, 0x0) 11:40:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 475.231795][ T9266] sctp: [Deprecated]: syz-executor.1 (pid 9266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.231795][ T9266] Use struct sctp_sack_info instead 11:40:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:18 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d0423b34000019703010902"], 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsmount(0xffffffffffffffff, 0x0, 0xa) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000180)={0x9, 0x2, 0xda6, 0x8}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000140)={0x3, 0xffffffff, 0x7ff, 0x4, 0xb1a, 0xfffffffe}) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000080)={0x3, 0x3, 0xfffffffb}) [ 475.713889][ T9279] IPVS: ftp: loaded support on port[0] = 21 11:40:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 476.113999][ T8727] usb 2-1: new high-speed USB device number 2 using dummy_hcd 11:40:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 476.374521][ T8727] usb 2-1: Using ep0 maxpacket: 32 [ 476.506698][ T8727] usb 2-1: config 0 has no interfaces? [ 476.620337][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 476.656186][ T8727] usb 2-1: string descriptor 0 read error: -71 [ 476.662808][ T8727] usb 2-1: New USB device found, idVendor=046d, idProduct=b323, bcdDevice= 0.40 [ 476.672182][ T8727] usb 2-1: New USB device strings: Mfr=1, Product=151, SerialNumber=3 11:40:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 476.762565][ T8727] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 476.793103][ T8727] usb 2-1: USB disconnect, device number 2 11:40:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 476.999929][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.007292][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.017231][ T9279] device bridge_slave_0 entered promiscuous mode [ 477.100368][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.107845][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.117772][ T9279] device bridge_slave_1 entered promiscuous mode 11:40:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 477.248953][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.312756][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.394199][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 477.415930][ T9279] team0: Port device team_slave_0 added [ 477.438407][ T9279] team0: Port device team_slave_1 added [ 477.475088][ T12] Bluetooth: hci2: command 0x0409 tx timeout [ 477.518476][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.526361][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.553560][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.577906][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.585137][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.611420][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.634086][ T26] usb 2-1: Using ep0 maxpacket: 32 11:40:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0xb, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 477.718560][ T9279] device hsr_slave_0 entered promiscuous mode [ 477.756846][ T26] usb 2-1: config 0 has no interfaces? [ 477.776876][ T9279] device hsr_slave_1 entered promiscuous mode [ 477.805931][ T9279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.813584][ T9279] Cannot create hsr debugfs directory [ 477.874307][ T26] usb 2-1: string descriptor 0 read error: -71 [ 477.880918][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=b323, bcdDevice= 0.40 [ 477.890666][ T26] usb 2-1: New USB device strings: Mfr=1, Product=151, SerialNumber=3 [ 477.975097][ T26] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 478.032435][ T26] usb 2-1: USB disconnect, device number 3 [ 478.608769][ T9279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.644872][ T9279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.687010][ T9279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.737112][ T9279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.139321][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.271035][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.281141][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.361046][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.423156][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.434074][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.443623][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.451009][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.519601][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.529600][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.539850][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.549521][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.554707][ T8727] Bluetooth: hci2: command 0x041b tx timeout [ 479.556846][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.571978][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.583460][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.684838][ T9279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.696465][ T9279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.727732][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.739042][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.749736][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.760691][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.771462][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.781393][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.793453][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.803525][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.841154][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.851628][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.966368][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.975158][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.013586][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.088175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.098963][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.171540][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.181986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.213097][ T9279] device veth0_vlan entered promiscuous mode [ 480.230547][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.240262][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.285575][ T9279] device veth1_vlan entered promiscuous mode [ 480.378062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.389511][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 480.399468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.409831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.447272][ T9279] device veth0_macvtap entered promiscuous mode [ 480.473622][ T9279] device veth1_macvtap entered promiscuous mode [ 480.525074][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.536568][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.576559][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 480.587187][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.597277][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 480.607863][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.622507][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.637304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.647831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.673762][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 480.688646][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.698739][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 480.709361][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.724625][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.734350][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.745301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.785324][ T9279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.795856][ T9279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.804941][ T9279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.813766][ T9279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.158858][ T8730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.167621][ T8730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.178394][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.367704][ T925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.375815][ T925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.383570][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 481.625831][ T12] Bluetooth: hci2: command 0x040f tx timeout 11:40:25 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x418000, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xa0001, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000180)={0x1}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0xffffffffffffff00}, 0x0, 0x0, 0x7, 0x6, 0x2, 0x7beb}, r1, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000100000000007a92e4880f8ba18c38eb03aa5a9e7a831e22aceeaa97fd1e85653b4bf71d92a8a04cce45b7d967b6ee66f92dc73e43a5cad4c6452fada5538a399331f678f03444eb64f0118a6cdfb51f6d0c81843f6b3f0d2ed11afdd874184200000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = accept4$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f00000002c0)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) 11:40:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1a001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc600800184002ac0f00051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) 11:40:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x10, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 482.083178][ T9550] netlink: 124938 bytes leftover after parsing attributes in process `syz-executor.1'. [ 482.343370][ T9555] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.354675][ T9555] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 11:40:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x11, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 482.386466][ T9555] team0: Port device veth3 added [ 482.392832][ T9562] netlink: 124938 bytes leftover after parsing attributes in process `syz-executor.1'. [ 482.605060][ T9555] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.614645][ T9555] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.647351][ T9555] team0: Port device veth5 added 11:40:26 executing program 1: set_mempolicy(0x4002, &(0x7f0000000080)=0x1, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x801) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0285628, &(0x7f0000000100)) fchdir(r3) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_OPERSTATE={0x5, 0x10, 0x3f}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_PHYS_PORT_ID={0x15, 0x22, "d19545696bf7fb480cd260ed051dde4816"}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3de}]}, 0x84}}, 0x4000000) 11:40:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x12, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:26 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x894) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="b00000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000008000128009000100766c616e00430000007000028006000100000000000c0002001c0000001b0000000600050088a800004c0004800000010004000000010000000c4ca65752000000000000000c00010004000000040000800c000100feffffff080000000c00010001040000020000000c0001007f000000800000000400038008000500c9f2e95ae84d55e6d82d3797cbd20d6db485c88678b25353bdbea06dea7f4edfbc046e", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0xb0}}, 0x0) 11:40:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x14, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 483.410509][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.420244][ T9595] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. 11:40:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x15, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 483.715765][ T4892] Bluetooth: hci2: command 0x0419 tx timeout 11:40:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000010403000000000000040000000000000500010001000000"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000580)={'bond_slave_0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x10, 0x0, 0x7ff, 0x3f, 0x5, 0x5, 0x6, 0x4, 0xe5}}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004880}, 0x48004) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0008002000000007000080004f07003c00680000050490780a010100ac1414329404010094040000441cc3c000000000352b00040000003f000000000000000600007fff00000000"]}) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000024000b0f000000000000000010000000", @ANYRES32=r6, @ANYBLOB="03000000ffffffff000000000a00010063686f6b650000001800020014000100"/48], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000600)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9, r6}) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000840)=""/117, 0x75) sendmmsg$sock(r3, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000640)="91", 0x1}, {&(0x7f00000006c0)="4e393293380a91e600a1452a09278a44decd789850298017292d7a67b471c82586780ee09a776ad4e2426e22ac75bc62d1e509db465d66747435bc53a6a77d976c4b658f4ab48bfc717bf4cfad19b2cdbed59a3b0276fd57071ff0b64e2f5df62cdb8d2856164969a1c9542201de3da6d9857c24daaa3c17767f232b02de9330a3c226b0f4bcbde0e91617e87eef57c8d4053f6e137e64fad748eb3935282e4257f0666e503d74b9abc13908543bc6653fe6f3851b69f7dffe54592127c29b16cf31bddab24fd07d39d4e846ccee8316188311d4db25c12b", 0xd8}, {&(0x7f0000000040)="b46520624da3c4b6d87d74b651d58d246449", 0x12}, {&(0x7f00000007c0)="6c81ed9e87530ecb433ad613e4d5268043bfaa84e79542735b3c6f0842eff162e0f7ea4777e16aa2bd6a7c38bacc49d684118f018f5bf7d9721a583d41ab324cd48f5def", 0x44}, {&(0x7f0000000940)="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", 0x6c1}], 0x5}}], 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)={0x5, {{0x2, 0x4e23, @private=0xa010102}}}, 0x88) 11:40:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r1, &(0x7f0000000100)=@xdp, &(0x7f0000000000)=0x80) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000520007031dfffd946f6105000a0000040000000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 11:40:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004c00000008001d80080078f5"], 0x20}}, 0x0) [ 484.582670][ T9612] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 484.591650][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.667119][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:40:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x18, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0x7, 0x99, {0x6, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000040000ff2445a5a59cc01523abdeb84a51281ad98a3b501f7bf3f6c805b44fdc1a6853e7f41ecdb30907b19b11ae7aa226910000", @ANYRES32=r5, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005000c0000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000340)={0x6, {{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8002, 0x0) 11:40:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x19, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 11:40:28 executing program 2: r0 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000780)={{0x0, 0x0, 0x80}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r1}, &(0x7f0000000240)=""/88, 0x58, &(0x7f0000000200)={&(0x7f0000000180)={'poly1305-simd\x00'}, &(0x7f0000000000)="21adfd5100", 0x5}) 11:40:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0x20f, 0x200, 0x0, 0x0, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'ftp-20000\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 485.567929][ T9631] ===================================================== [ 485.574945][ T9631] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 485.583038][ T9631] CPU: 1 PID: 9631 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 485.591635][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.601695][ T9631] Call Trace: [ 485.605018][ T9631] dump_stack+0x21c/0x280 [ 485.609410][ T9631] kmsan_report+0xf7/0x1e0 [ 485.614813][ T9631] kmsan_internal_check_memory+0x358/0x3d0 [ 485.620725][ T9631] ? crypto_shash_final+0x3cd/0x480 [ 485.626156][ T9631] kmsan_copy_to_user+0x81/0x90 [ 485.631767][ T9631] _copy_to_user+0x18e/0x260 [ 485.636454][ T9631] __keyctl_dh_compute+0x24ea/0x2fa0 [ 485.641840][ T9631] keyctl_dh_compute+0x234/0x280 [ 485.646814][ T9631] __se_sys_keyctl+0x1181/0x1fe0 [ 485.651792][ T9631] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.657632][ T9631] ? kmsan_get_metadata+0x116/0x180 [ 485.662862][ T9631] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.668698][ T9631] ? kmsan_get_metadata+0x116/0x180 [ 485.673917][ T9631] ? kmsan_set_origin_checked+0x95/0xf0 [ 485.679495][ T9631] __x64_sys_keyctl+0x62/0x80 [ 485.684197][ T9631] do_syscall_64+0x9f/0x140 [ 485.688730][ T9631] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.694640][ T9631] RIP: 0033:0x45e179 [ 485.698553][ T9631] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 485.718185][ T9631] RSP: 002b:00007f6d15096c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 485.726642][ T9631] RAX: ffffffffffffffda RBX: 00000000000202c0 RCX: 000000000045e179 [ 485.734642][ T9631] RDX: 0000000020000240 RSI: 0000000020000400 RDI: 0000000000000017 [ 485.742645][ T9631] RBP: 000000000118cf90 R08: 0000000020000200 R09: 0000000000000000 [ 485.750633][ T9631] R10: 0000000000000058 R11: 0000000000000246 R12: 000000000118cf4c [ 485.758634][ T9631] R13: 000000000169fb6f R14: 00007f6d150979c0 R15: 000000000118cf4c [ 485.766626][ T9631] [ 485.768957][ T9631] Uninit was created at: [ 485.773223][ T9631] kmsan_internal_poison_shadow+0x66/0xd0 [ 485.778961][ T9631] kmsan_slab_alloc+0x8a/0xe0 [ 485.783675][ T9631] __kmalloc+0x2bb/0x4b0 [ 485.787933][ T9631] __keyctl_dh_compute+0x1f82/0x2fa0 [ 485.793233][ T9631] keyctl_dh_compute+0x234/0x280 [ 485.798182][ T9631] __se_sys_keyctl+0x1181/0x1fe0 [ 485.803133][ T9631] __x64_sys_keyctl+0x62/0x80 [ 485.807850][ T9631] do_syscall_64+0x9f/0x140 [ 485.812387][ T9631] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.818288][ T9631] [ 485.820627][ T9631] Bytes 0-87 of 88 are uninitialized [ 485.825915][ T9631] Memory access of size 88 starts at ffff888020903720 [ 485.832679][ T9631] Data copied to user address 0000000020000240 [ 485.838830][ T9631] ===================================================== [ 485.845786][ T9631] Disabling lock debugging due to kernel taint [ 485.851944][ T9631] Kernel panic - not syncing: panic_on_warn set ... [ 485.858551][ T9631] CPU: 1 PID: 9631 Comm: syz-executor.2 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 485.868528][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.878594][ T9631] Call Trace: [ 485.881909][ T9631] dump_stack+0x21c/0x280 [ 485.886384][ T9631] panic+0x4d7/0xef7 [ 485.890327][ T9631] ? add_taint+0x17c/0x210 [ 485.894859][ T9631] kmsan_report+0x1df/0x1e0 [ 485.899387][ T9631] kmsan_internal_check_memory+0x358/0x3d0 [ 485.905219][ T9631] ? crypto_shash_final+0x3cd/0x480 [ 485.910448][ T9631] kmsan_copy_to_user+0x81/0x90 [ 485.915316][ T9631] _copy_to_user+0x18e/0x260 [ 485.919940][ T9631] __keyctl_dh_compute+0x24ea/0x2fa0 [ 485.925311][ T9631] keyctl_dh_compute+0x234/0x280 [ 485.930284][ T9631] __se_sys_keyctl+0x1181/0x1fe0 [ 485.935258][ T9631] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.941099][ T9631] ? kmsan_get_metadata+0x116/0x180 [ 485.946323][ T9631] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.952168][ T9631] ? kmsan_get_metadata+0x116/0x180 [ 485.957386][ T9631] ? kmsan_set_origin_checked+0x95/0xf0 [ 485.962976][ T9631] __x64_sys_keyctl+0x62/0x80 [ 485.967680][ T9631] do_syscall_64+0x9f/0x140 [ 485.972207][ T9631] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.978112][ T9631] RIP: 0033:0x45e179 [ 485.982027][ T9631] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 486.001649][ T9631] RSP: 002b:00007f6d15096c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 486.010072][ T9631] RAX: ffffffffffffffda RBX: 00000000000202c0 RCX: 000000000045e179 [ 486.018069][ T9631] RDX: 0000000020000240 RSI: 0000000020000400 RDI: 0000000000000017 [ 486.026053][ T9631] RBP: 000000000118cf90 R08: 0000000020000200 R09: 0000000000000000 [ 486.034035][ T9631] R10: 0000000000000058 R11: 0000000000000246 R12: 000000000118cf4c [ 486.042020][ T9631] R13: 000000000169fb6f R14: 00007f6d150979c0 R15: 000000000118cf4c [ 486.051039][ T9631] Kernel Offset: disabled [ 486.055371][ T9631] Rebooting in 86400 seconds..