[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts. 2020/06/01 12:21:53 fuzzer started 2020/06/01 12:21:54 dialing manager at 10.128.0.26:38767 2020/06/01 12:21:54 syscalls: 2810 2020/06/01 12:21:54 code coverage: enabled 2020/06/01 12:21:54 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/06/01 12:21:54 extra coverage: enabled 2020/06/01 12:21:54 setuid sandbox: enabled 2020/06/01 12:21:54 namespace sandbox: enabled 2020/06/01 12:21:54 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/01 12:21:54 fault injection: enabled 2020/06/01 12:21:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/01 12:21:54 net packet injection: enabled 2020/06/01 12:21:54 net device setup: enabled 2020/06/01 12:21:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/01 12:21:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/01 12:21:54 USB emulation: /dev/raw-gadget does not exist 12:25:23 executing program 0: prctl$PR_SET_FPEMU(0xa, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x103403, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0xe, 0x10, "bda83259f38e53f770e775c81590dc7a134366266be81991f9a651401a6f0b68d7e0166c6427453ec9c38583d2a24d6dd328d1bec603a1bac848bbc30ccd093a", "b29f9d543723be1991459231b7fced2dd3d62b0f3feb40e375849af067baf1fe0d0dd73889dbb9736c1402ae715f62442447cc8a3fc5383af78b7de355977f47", "4789a2e17b72a4128b249f6c9f2fe7a785f7a1cd404c3c87d90576e9f14e4e86", [0x7c8, 0xffff]}) ftruncate(r1, 0x72) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0xe, 0x2, 0x9, 0x10, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d3, 0x6, 0x1f, 0x1e, 0x0, 0xc0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf9, 0x81, 0x62, 0x4, 0x80000000}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x6, 0x0, 0x4}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [], @empty}, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x25, 0x14, 0x4}]}, 0x80}}, 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8000) dup2(r1, r2) r3 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video37\x00', 0x2, 0x0) sendfile(r3, r4, &(0x7f0000000380)=0x65, 0x7) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0xde1b2904df65a5fa, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={r5, 0x3, 0x0, 0xfffff298, &(0x7f0000000400)=[0x0], 0x1}, 0x20) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20004084) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000600)) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f0000000680)={0x0, 0x1, 0x1, [], &(0x7f0000000640)=0x79}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x12) syzkaller login: [ 292.544599][ T8850] IPVS: ftp: loaded support on port[0] = 21 [ 292.793346][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 293.000802][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.008064][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.017784][ T8850] device bridge_slave_0 entered promiscuous mode [ 293.030570][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.037768][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.047534][ T8850] device bridge_slave_1 entered promiscuous mode [ 293.092305][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.106305][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.150271][ T8850] team0: Port device team_slave_0 added [ 293.160721][ T8850] team0: Port device team_slave_1 added [ 293.198205][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.205812][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.232100][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.247043][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.254316][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.280492][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.366883][ T8850] device hsr_slave_0 entered promiscuous mode [ 293.521027][ T8850] device hsr_slave_1 entered promiscuous mode [ 293.888259][ T8850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.928256][ T8850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.046558][ T8850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.257243][ T8850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.644887][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.677873][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.687557][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.708537][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.729568][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.740421][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.749657][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.758093][ T3900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.777240][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.803474][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.813003][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.822407][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.829766][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.871820][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.882395][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.893824][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.906418][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.918255][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.929946][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.940553][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.950845][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.988530][ T8850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.002255][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.053756][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.089150][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.099223][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.110608][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.120312][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.128173][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.136856][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.146960][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.188741][ T8850] device veth0_vlan entered promiscuous mode [ 295.207303][ T8850] device veth1_vlan entered promiscuous mode [ 295.217521][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.227070][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.237416][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.283013][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.292307][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.301525][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.311459][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.321541][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.336662][ T8850] device veth0_macvtap entered promiscuous mode [ 295.351470][ T8850] device veth1_macvtap entered promiscuous mode [ 295.393287][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.402479][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.420690][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.429955][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.439938][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.460563][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.491503][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.501333][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:25:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, '\x00', "6c8cab8c2c0b564058f42a4327098d297e3f9e06aa7c9683a6b7b77d0bce56f3", "14272371", "b6ad3333b894be91"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r1, r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r4, 0x0, 0x10}, 0xc) r5 = openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) 12:25:29 executing program 1: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9d0000, 0x7, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990905, 0x800, [], @p_u16=&(0x7f0000000000)=0x119}}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40cc00, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffff800, 0x0, 0x10000, 0xff}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000001c0)={r4, 0x80000001}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20042, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x6, 0x10000, 0x20, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r6, 0x4}, 0x8) r7 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0xff, 0x480000) ioctl$USBDEVFS_CONNECTINFO(r7, 0x40085511, &(0x7f0000000340)) r8 = fcntl$dupfd(r7, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000440)={0xffffffff, 0x7, &(0x7f0000000380)=[0xf5, 0x6, 0x8001, 0x8001, 0x2, 0x2, 0x4], &(0x7f00000003c0)=[0x101, 0x5, 0x3, 0xe987, 0x5, 0x5, 0x1, 0x40, 0x9, 0x91a], &(0x7f0000000400)=[0xc8f3, 0xffff, 0x101, 0x2]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000480)=0x400) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$BLKRAGET(r9, 0x1263, &(0x7f0000000500)) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x480, 0x0) write$P9_RLOCK(r10, &(0x7f0000000580)={0x8, 0x35, 0x2, 0x3}, 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f00000005c0)={0xb8, 0x6e8, "998765dc18547e166f97ab7ea76717684f6433c19160ee8b98176a988947662a240247f7a7dce9f6efb490a57b69f0ebb02c9b0736001af7a3eb614bd6d37311b25b976147b3fc6c4d737e6dd25a865fb8474e451e136d02f9d8714ca7ea06d8b6bfaec0f33315317b78da15482b4c7d298c1065db36bc1a9f6b7a3720031907688c8f4ba2c875df93203d67c8655f5dce1839559651f75447ffbd684d1cdf33cafb2552b5db39a1eca82d3559df25c8"}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xbc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040000) [ 299.429150][ T9067] IPVS: ftp: loaded support on port[0] = 21 [ 299.866321][ T9067] chnl_net:caif_netlink_parms(): no params data found [ 300.160744][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.167968][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.177298][ T9067] device bridge_slave_0 entered promiscuous mode [ 300.231625][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.238938][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.248084][ T9067] device bridge_slave_1 entered promiscuous mode [ 300.354344][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.385296][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.472948][ T9067] team0: Port device team_slave_0 added [ 300.505110][ T9067] team0: Port device team_slave_1 added [ 300.583654][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.590839][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.617013][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.691728][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.699015][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.725189][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.089092][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 302.101266][ C1] clocksource: 'acpi_pm' wd_now: 9836a2 wd_last: 30cf0f mask: ffffff [ 302.111679][ C1] clocksource: 'tsc' cs_now: a5a699f363 cs_last: a220986388 mask: ffffffffffffffff [ 302.123087][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 302.148098][ T17] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 302.157729][ T17] sched_clock: Marking unstable (302199861928, -51281481)<-(302155955472, -7882432) [ 302.173630][ T9222] clocksource: Switched to clocksource acpi_pm [ 302.227235][ T9067] device hsr_slave_0 entered promiscuous mode 12:25:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r5, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000), 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 302.280353][ T9067] device hsr_slave_1 entered promiscuous mode [ 302.340566][ T9067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.348183][ T9067] Cannot create hsr debugfs directory [ 302.552252][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.729946][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.746186][ T9067] netdevsim netdevsim1 netdevsim0: renamed from eth0 12:25:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff000) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) [ 302.792049][ T9067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.856002][ T9067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.921641][ T9067] netdevsim netdevsim1 netdevsim3: renamed from eth3 12:25:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200012800b0001006272696467650000100002800c0021000000000000008000000000a67c3031ae44e3607eed512cf2e1703b8840cbb82df5b4614acbadf0181b8915a5f6634e445af8c7ba413a3db2f129e5240414bf40750868af633c5055c0958194c611b8c6acaf95e90b1a390d6047ea64d8e88ecc6d01ca6b3ee7b8b48b05a2a0f7b8aa9bf8b34f8cd785d8ef2c0d4f86444e8edc4ee0b9862a4ad2bea206375b74e812539b40aad8c2718af560e5f6f2ed647352e43dbcb223840569d21766e3fbd51d9a34f24e07da2fb96351049ced7eea796ba3"], 0x40}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0xcfb3}, 0x16, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x22002, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x6, 0x65, 0x1, 0x4, 0x0, 0x9, 0x10860, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce15567, 0x2, @perf_config_ext={0xc03, 0x3f}, 0x440a0, 0x6, 0x2, 0x6, 0x8, 0x6f9, 0x34}, r1, 0xe, 0xffffffffffffffff, 0x8) [ 303.102113][ T9291] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.143830][ T9291] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 12:25:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xf8, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ID={0x8}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0xd4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x4b, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @loopback}}}]}, @CTA_ID={0xb}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL]}}]}, 0xf8}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x216801, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x40}}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400000, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x2, r5, 0x1f, r6}, 0x10) [ 303.242515][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.310481][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.319508][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.336869][ T9067] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.347998][ T9297] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 303.353986][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.356759][ T9297] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.365840][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.373824][ T9297] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.373863][ T9297] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.373896][ T9297] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 303.373925][ T9297] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.420538][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.427722][ T3900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.464331][ T9297] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 303.472574][ T9297] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.482194][ T9297] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.491825][ T9297] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 303.556155][ T9067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.566946][ T9067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.633686][ T9067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.645921][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.655498][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.665289][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.674600][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.681964][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.691043][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.701755][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.712600][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.722841][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.733086][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.743377][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.753750][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.763378][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.773520][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.783050][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.792592][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.800430][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 12:25:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r4, r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7, 0x0, 0x10}, 0xc) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x9, 0x8, 0x4, 0x4000000, 0x80, {r8, r9/1000+60000}, {0x1, 0x0, 0x2, 0x6, 0x0, 0x7, "344cd628"}, 0x7fff, 0x7e130adbf9e92361, @offset=0x36200000, 0x3, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r10}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x100}) setsockopt$IPT_SO_SET_REPLACE(r0, 0xf402000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0xf8, 0xf8, 0x0, 0xf8, 0xf8, 0x190, 0x190, 0x190, 0x190, 0x190, 0x5, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@local, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) [ 303.940821][ T9067] device veth0_vlan entered promiscuous mode [ 303.979165][ T9067] device veth1_vlan entered promiscuous mode 12:25:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r0, r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x0, 0x10}, 0xc) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x100000a, 0x12, r1, 0x82000000) syz_emit_ethernet(0x40, &(0x7f0000000000)={@local, @broadcast=[0xff, 0xff, 0xff, 0x0], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x32, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0xb, 0x0, 0x0}, @local}, {0x0, 0x88be, 0x1e, 0x0, @wg=@data={0x4, 0x0, 0x1e00, "14f5f89d86dd"}}}}}}, 0x0) [ 304.078725][ T9067] device veth0_macvtap entered promiscuous mode [ 304.096291][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.106549][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.115574][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.125643][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.135545][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.145138][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.155492][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.164934][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.174344][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.184124][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.197917][ T9067] device veth1_macvtap entered promiscuous mode 12:25:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d4"], 0x14f) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r4, 0x0, 0x10}, 0xc) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f00000000c0)=[0x1ff, 0x80, 0x7, 0xfff, 0x5a9, 0x83e2, 0x80, 0x0], 0x8, 0x0, r5, r6}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020ec4678c06f45574e3485270012800b00010067656e65766500001000028005"], 0x40}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 304.286503][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.297095][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.310492][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.383020][ C0] sd 0:0:1:0: [sg0] tag#4440 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 304.393822][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB: Test Unit Ready [ 304.400843][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.410787][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.411222][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 304.420609][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.420722][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.420829][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.420939][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.421042][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.421151][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.421259][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.421362][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.421462][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.431987][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.441687][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.453999][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.461064][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[c0]: 00 00 00 00 00 00 00 00 [ 304.592945][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.601933][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.611031][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.620218][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.629474][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.639239][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.649235][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.659012][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:25:35 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x482, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r1, r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r4, 0x0, 0x10}, 0xc) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000000)={0x1, "0c2c620cfbf0828662ca9ea98a4dda40f2a9ad2b5add660a9879253bfb38a6af", 0x60, 0x9, 0x7ff, 0x8, 0x1}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)=0x40) 12:25:36 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000029001f4d154a817393278bff0c80a57802000000000484001403", 0x1e, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffa, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x24) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="97fdec904d40fc3b09e97db2975c9bb2bf7d7e89c4a2184dcd3b0dac8885393fa63c8ac02fddc9a2dd52e82c80f45deb33dc3fc36d9cb328e1affacc9aa57a3e66fc24c0c18c91d92361996e7403000000a6e55d8c0c94f87ba81496fa320ff4c8b9cb5a1b74555da95b43c7a291c298c0f074c40fa97551c7e9efd5a0c2581f3e20067d7dc18decca", @ANYRES16=0x0, @ANYRESDEC=r0], 0x3}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1300000031001f00040000eb1b849ad502", 0x11, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="cbae00001a", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:25:36 executing program 1: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x80, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'veth0_to_bridge\x00', 0xfae}) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r2, r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r6, 0x0, 0x10}, 0xc) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x202000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r6, 0x1}, &(0x7f0000000040)=0x8) 12:25:36 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x10002) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x6e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0}}], 0x2, 0x40) 12:25:36 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="62ac84c4ca48a3bcb476b3c2b894bf27e7ab0ca7f6d5df8a93719baabcff3fa2ac2863815241e812cf09c65aa2499561f50c9fc9b101a7f3aaa998c38e66d90f5c9ad3cc95c7c1ad4d8586f86cc05a02f137dfdb92c9b5ad3f1970054dd99edbc896252bb82fc1038800a43503edbbcd09bc57d6e00c56509de17c7fc5f38418ed864a07f6bd738ec22c7db1ed9432454a2fff6bde82cafb6ca5a76452aca45bebbaa232e63523e915e86f156cc7a69b28f32482c3c52a32f226845131cb1c64be1b1fff91d1107a8f6b2ae6b6d7061d0dbfdb47985c99c2ae80c7b79cbadba0b17d3e61f15738af2336ab54d06ba8f106dd83ba5e700025aeb2bf382ad6a5c0855f35d1c7b3393dab956afff8458aaebd860569739e1d1e021b7442a32c2ae221514accd2534d436e36051a4383ec82312f7d24b78d24c5afe52345587d1584fcb2c01d8eba7746eb19b3322a98af889a91375949d548165e79685aad7dbde1d586daf2d5c3befe5156763d81f9463b44f777eb99854a10ec3829749ee76472376b91f8d20627a755d84af21276a6351eb9218ea54e71c3dfad7595f48a2b81f1a5d922d7a57350cdb8991082d868dca17a350a830e34979051eb875542e5e6df67e15d4562d4c16116ddb7771beca57451f3d7037e9ad09b265ea9ae45f3935913d959d9ab004007bab77d3efdab99cd0f9b69af5eaff4ace9a39022483c16321ed8f10f8d51f210f3e8ed43c2e6fb59f0b7b37e30480a728fe6763e8253f035e6fe56524156ce1ae801489f16b92ef3135522829fff7a73c6342528dfc6984a0df306cc8085b67b9aec3822897ae51df39c1ebb691c04a97937354bc04511351e5501a2ed92fc8d123b20ef6ca4a58ce12ed0c7b54e5270ec00323dc09bf363a778c92d8297191ab393ccbd33495a7ed73443fa79fad250ed9bd958ec8603cff186b75566fcbf4865a5e2554e8c1cb8d1816ceb8d52b26a3dbde6e920b43072c6a5ed3a4411bd973487ef74100feea3363ec1699cb371a2dd95a3abfb34d92bbe58e995760d5cfd18d84c3de08b3ec3587eb7dba4a76ce5af1f0a2ae25896537042829ed248c5dc1bff0f57c8e4650a57a19cb63ac0431994451ab85f26a51778f048848eabd8759d769d4e449f60af112d96b2eb03044fe1a09d027bb76aac31754679ba4f23b11f1a0590d0d1cc76cec85177cca633693ad2160fc749ff4452c564d1f5a6c79913792f7bd66e02973b87c99fc00b94170154df4d194fc6f6d6ae002415f9bd88750744b52943cc22e1cc3057514746ff3df8eb4ad3b7460d3ff5c3fd71bfe5eb0420c57208742095074bd08c9d7c5a38b0c0535f123062a393c35630aa8ba408e07b3edf305bf928e9b23f728455fdf6c1a825d6d8824759352f10c890430849edd0a81a523152934c4cfd380639ec0a73adccd668617ce39d7b565c4ff574247ebfa1e392bff911887bc590d369d816c8a255523cafc3ccebb4e6ff8bfb2159f74cbc36a5049bf60a50f3c71e5e47ffd44624e241d8f873886a0642b22b0abf065fde9aad14857a489a24a529affb0d54af3c4ecde703eb4fbfd8dfc8bfb727522816d9f6c3a3f0fb0643951a0019577f89b8b1cec6a4e89692da0af68e257d1849f4f5074842d94bf930a024906c83bd9a30247bc28dd915e798b1dc08c3e0ec761a74c4b8d439aa5db12c1a76685f233a6c85b719aa3feb08edbd1e9a0a6d73d1afc003b7bc43d1648b0b7efcfc910913b8fe7b24bfa1a0b3dfc1099e6fb0898e66582033011f8e782a89c26393f6e5c62894a15601441a03a16434c68252b055031b63851a4d640967e3af0160b2e165a9c297c332c0b676b50aa190010d9db71765612b52fa0aac1e83b2fc9effef9af7b86a7e30594ff3e56ad47b5c60d72084056d809b51f24046abea1e11b9df118ac0f34468f5bcca38f6eeee8b170c6407053232f15a8ceb76129f0cd94c6c6de175009bda1be0448bd140f376b6cd1dd8fc512e76b5162d44c50efadd071db54c6fac71f5734e9273ebf048418c9ec22b01f548385ca1675f65581071feb30386e2bec4fc27ff0e2fa7d3e20f7bd952b542f4bab1e5c7b4a8adc8b3b20cc1531ec90fcaad93f2d289a0043c8571994dc8e2414746a06ed10a3109509dada974d939106640401451769c49a74e9716aa383109c2eb088fea903fe08efe321203b4154bc528ae10bb3a126f540a402e1f45da1e91eb1b73f5e8395f9f86c3b6c38eefe8a984872a1a75afc6bb468bcf98b449eabd127ca54c2beca3c086cf0ea4f6ed67ea6338cd499d95a05e43907980f41c80ed55f070825b0c60c70553ba61b643b4f6fedc0e73eb010ec166d09829a3867a9b91e46cd40baa3088f24afcf2ff19d44aa2ff1f1d6ff7f119bae467fb50fa8431eb3d0d73389d9aeb55963bdb10f8e8f833881c794728250f37c426c9dc7ca561b4f82e43a349a7ec398f059104840998a34878a1be9e3ced30ca56b648261251a3f98d2273ae3071bf420cc97144a4cf215c880782e73acd308923c4e99df1e5a0ea9dc67e9012b20771d18330f04bb301d6117da7afdaebfb7204c2c4b8cd0809fa129cc7b90e6be51353e71ec0ffdd328ccf52b7f2d8cf500f511d1cae23e9c813ff54a437125ab12b51f82c559feb022c8047b05fb22512362511bf5a728238c842352d4d97001124f523438ce0b2ad0c66268cfd9c62d5a30bd1c7186e07f109892df69dfeacc0566a8fe10e05aaf4e0d8513edf258de8ca6b81f86d9a709c954065c8591603d399f6f1bc433eec27a808466a268b250361fa43e1432bd953c074928ce634ff5ba431083fdc187f7d953cb915e43d1da206acdd8e56b37f4db975bd67cd9919f54e80a226f59707c4f28b000e63f671fd5e0438ca678ddd2cc2c4e76ddaf7abcbe48caaa6a762ee0ca0f9cd6d5172212ee0c487c524aafc99c98aba2b6f628cf7bdc5238bd3827a9bfbcd9b3cccf593dd7e611cca6007467da05dda84c142757cf9842a572c15632add6476f0eedf60f1c8d68a2936178bf49216118791eeb158253ad9260a1f9b3049847c479ca1a14140433bfe611dcbce21024f60ec9c22258c6699c1afc1f38e1b24fedcbc59443890ee1fd9cccc17279a2d033de2a0ab5df66e616e5f57fea869deddfa69b859934d1aea0e3c3094dc972a6352caed9079bec3b186953a29b662335f939ba89acff4cdd48eba77aa64e9694863466c2f679ff8acf762a0567f6cd6e5b458e654fe5c49d19caa278345d165c39da84f4b0839391430b25fc065483c0b0f92ea2f70f2ad69264b0917e73ae39c16143eabb13371c90ccebd4e45116a4959685d93574d730e499e242674291e40496c3db5d5e947d3616e3029a205a7e0c1be8f73ffa0bd6dc84811b54ec8a3e30602a0e6d2c34b067b74e91961060fbec0617dea235ce7fe92f313289642e54b36550886b5952762fbfd3e50589d73ba4138bbec3277a98248e59989068e70c836ee160b708a881b7579b8ce44a8e2de63f008b2e282072dbbe1e18fc6ea9e0c2b916aca7e89705d77eeefdea143beb760ee2dc33384908acaf59c2b333f8f29fd924869f13a84afe393646c8b3c3ba82889d355fad320f11992d33cebbfd29f3ecb5cb9edf44d0614db964e2c4d18cfea29ce52ac027c1a585c8cb380d9dac9f2449146d3a1faed453fcb87ad24f4f8805431e0b25e11ff1fbf4e0a07baced116f28252e1d8f09903e1a5e918ff2a2ca33fde3b13da22123aee4c5ceb67ed15bab96a5a578c4a64152b371e55479510357924cec7974b112b267183e2ecc13b2d23ee74a8e98073d1156eae2463de21182be9e50517b2f1c20343bbf1b577f87b84ad37e6b6a200ae5e48c3666b0460b7154f08d44615b2518c04", 0xace}], 0x1}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f32f00fb30f0f309a0900000065002ed8ddc74424008f6dc4bd8787442402c43a727fc7442406000000000f35f30f090f013ac4c18d72d683b9070200000f32ed", 0x46}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 305.807735][ T9342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 12:25:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b7f03e3f7000e0000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf242ab0f8381ad6e74703c48f939a5a7378bc7a581eb886a5e54e8ff51700", 0x4c}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000000c0)) dup2(r2, r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r5, 0x0, 0x10}, 0xc) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) [ 306.137136][ T9355] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:25:37 executing program 1: r0 = socket$kcm(0x29, 0x200000002, 0x0) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x80, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'veth0_to_bridge\x00', 0xfae}) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r2, r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r6, 0x0, 0x10}, 0xc) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x202000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r6, 0x1}, &(0x7f0000000040)=0x8) 12:25:37 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r1) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0x17, {0x80000000, 0x4, 0x5, 0xff}}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000a00053582c137153e370900018004001d00d1bd", 0x2e}], 0x1}, 0x0) [ 306.625427][ T9367] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 306.633916][ T9367] openvswitch: netlink: Flow actions attr not present in new flow. 12:25:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r5, 0x0, 0x10}, 0xc) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r3, r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x0, 0x10}, 0xc) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000000)=""/175) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x4000009) [ 306.817625][ T9375] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 306.826130][ T9375] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 306.853258][ T9377] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 306.861810][ T9377] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 12:25:37 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a0000000400000000000001000000003d007702062000000007000000000030612e2e615f615f000000"], &(0x7f0000000040)=""/97, 0x3e, 0x61, 0x1}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x141000, 0x0) shutdown(r1, 0x0) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x2280, 0x20) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xb4, 0x1, 0x3, 0x5, 0x0, 0x0, {0xe, 0x0, 0x8}, [@NFQA_EXP={0xa0, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3bb9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x1088d) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 12:25:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6f"], 0x200}}, 0x20000000) socket(0x25, 0x2, 0xda) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000783f5719fc0400", @ANYRES16=r2, @ANYBLOB="6ffe00000000000000000200000014000180040001007564703a73797a32000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38020000", @ANYRESOCT, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x140}, 0xc804) sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/11) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$notify(r4, 0x402, 0x0) [ 307.452356][ C1] hrtimer: interrupt took 213435 ns [ 307.570622][ T9383] team0: Port device veth3 added 12:25:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000024000b0e00009a24d77d92a9c0926100", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000006000500040000000c000100736b627072696f000800020000000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc17b49ad97f1a4e1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04102abd7000fbdbdf2544d7da089025b46af461164dac54951c", @ANYRES32=0x0, @ANYBLOB="0c009900fbffffff0200000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x1) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ftruncate(r0, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r4, 0x100000001, 0x80000, 0x28120002) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x7, 0x0) write$sndseq(r3, &(0x7f0000000100)=[{0x9, 0x22, 0xf4, 0x81, @time={0xfffff27e}, {0x7f, 0x40}, {0x2, 0x3f}, @raw8={"3d3848e1b6db97e6e8589b5a"}}, {0x2e, 0x8, 0x1, 0x0, @time={0x7250, 0x2}, {0x0, 0xea}, {0xff, 0x9}, @control={0x31, 0x3, 0x7}}, {0x8, 0xa1, 0x4, 0x3, @time={0x101, 0x100}, {0x0, 0xaa}, {0x3f, 0x2}, @note={0x4, 0x80, 0x8, 0x5}}, {0x3, 0x6, 0x1, 0x81, @time={0xac, 0x796b}, {0x68, 0x2}, {0x81}, @raw32={[0x1, 0xfffffffb, 0x1000]}}], 0x43d) [ 307.770261][ T32] audit: type=1800 audit(1591014338.777:2): pid=9395 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15724 res=0 12:25:38 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "783bb07d2e98e3c1ee9058befbb426d7a6364728e35b883fc592213073d50a6f6f313f33"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf0000000, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 307.901568][ T32] audit: type=1800 audit(1591014338.907:3): pid=9395 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15726 res=0 12:25:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x5c4301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x248001) dup2(r3, r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r6, 0x0, 0x10}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000001c0)={0x8000, 0x1ff, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0xa980, 0x7f}, &(0x7f0000000140)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="66bad104b800000000eff2450f2b49b9363e460f8d519aff2766b84f000f00d8c482e9bb5b0c470f01cb448391a62f963700f22e0f2189460f352dec000000", 0x92}], 0x1, 0x40, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r8, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:25:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013ac4c18d72d68366baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000100)={@private1}, 0x14) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r5, 0x0, 0x10}, 0xc) io_uring_enter(0xffffffffffffffff, 0x8, 0x8000, 0x2, &(0x7f0000000200)={[0x7ff]}, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x7fffffff, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:25:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge0\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x34}}, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'bridge0\x00'}, &(0x7f00000000c0)='bridge0\x00', 0x8, 0x2) [ 308.297234][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000044 [ 308.330335][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000012 [ 308.351945][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000019 [ 308.372124][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000005d [ 308.419456][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000017 [ 308.428329][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000b [ 308.470245][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000e [ 308.493516][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000054 12:25:39 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) [ 308.519969][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000054 [ 308.550938][ T9410] kvm [9409]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000004c 12:25:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d800000018008103e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b800069903000000050015800300812fa80016000f0063e3fb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025cc3d39e4b51e2752b4285eb3fc50ca9e33f4d6ce722f1266bbb8061400360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93450000", 0xd8}, {&(0x7f0000001440)="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", 0x174}, {&(0x7f0000000080)="8fa20b2180d29900"/17, 0x11}, {&(0x7f0000000240)="b34bfae399c8c080c4862591aee5f9f01338822a166c5f3ea798af985df38c5d9191bbbf5b5b81deb47dc15b48450ee840dfa704d64e3648cc946ede4a4e814614ae20f9b2b92117d092712bcedd1f4534d3edc64c79ae39166301dcd7a335f6842d1a1c6a82d6900b8d9152cd384330a37052d68bb49ac1a1b89e2e587b0fb49bd26178260187d5c99042012fbf544650e24f00c2330429f4a1d873d4a83ca837d34c5523cb7b16ba9a4ef5b28cb8ab2092cb3be9d8f3798ad36bf08402b0678db810c35978dc13328d32cc21917f", 0xcf}, {&(0x7f0000000440)="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", 0x1000}], 0x5}, 0x0) 12:25:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4008ae89, &(0x7f0000000240)={"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"}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x1c, r6, 0x31905e13403123b7, 0x0, 0x0, {0x5, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x40008080) [ 308.927176][ T9442] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.935944][ T9442] __nla_validate_parse: 6 callbacks suppressed [ 308.935976][ T9442] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. 12:25:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000002e4c833d0eb524563d000000000000000700000010000000000000000000000007000000"], 0x20}, 0x0) [ 309.047381][ T9444] kvm [9443]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xa25c3c0000000000 12:25:40 executing program 1: syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa7fbe8da87d869436aa0bc72f0e6a7caaaabbbbbbbbbbbb080045000024000000000021907864010100ac1414aa0000000004019078005dbe1800796686"], 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520080000000000000500fff64017db9820000000000009d4"], 0x14f) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "783bb07d2e98e3c1ee9058befbb426d7a6364728e35b883fc592213073d50a6f6f313f33"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0xc000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) 12:25:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x40}}, 0x0) connect$caif(r1, &(0x7f0000000000), 0x18) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x13}]}, 0x20}}, 0x0) 12:25:40 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x178) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xffbb, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x6c}, &(0x7f0000001fee)='R\x04r\x01\x04\x00\x00\x00\x00\x00!rVi#:De', 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000000000000000000000000400000000001804000000000000000000000c00e2013bbbb769ba67bdd4990000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072ee00000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000686e138c6c0ff77500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6599200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053cbf7eee533b170000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee7200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800"/2376]}, 0x9c0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'team_slave_0\x00', 0x3}, 0x18) recvfrom$inet6(r1, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4c07000000000000001a036b5712ade616fbaef97f74440e82798f000000000000000000", 0x24, 0x0, 0x0, 0x5a) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040), &(0x7f0000000280)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="109b8553d862"}, 0x10) [ 309.422487][ C0] sd 0:0:1:0: [sg0] tag#4441 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 309.433212][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB: Test Unit Ready [ 309.440075][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.450075][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.459995][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.469966][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.480314][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.490223][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.500131][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.510027][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.519928][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.529837][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.539735][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.549627][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.559541][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12:25:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r2, r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r5, 0x0, 0x10}, 0xc) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/170) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045505, &(0x7f0000000000)) [ 309.569461][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.579384][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.642649][ T9469] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 3, id = 0 [ 309.740173][ T9473] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #1986356271 [ 309.768705][ C0] sd 0:0:1:0: [sg0] tag#4442 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 309.779406][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB: Test Unit Ready [ 309.779516][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.779623][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.779730][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.779852][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.825324][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.835230][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.845195][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.855081][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.865011][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.875009][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.884934][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.894817][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.904703][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.914602][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.924498][ C0] sd 0:0:1:0: [sg0] tag#4442 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 12:25:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000000000030000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r5) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}}, 0x0) [ 310.103879][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 12:25:41 executing program 1: accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x1}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = gettid() tkill(0x0, 0x28) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/raw6\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r5, r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x0, 0x10}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000240)={0x2, 0x8, 0x10001, 0x7ff, 0x200, 0x4}) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, [], 0x1}, 0x2}, {0xa, 0x4e20, 0x2, @mcast1, 0x7f}, 0xaaf5, [0xffffffa7, 0x8, 0x2, 0x2f, 0x4, 0x2, 0x0, 0x2]}, 0x5c) [ 310.146413][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 12:25:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5001000010000307", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000000076657468", @ANYBLOB], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/1307], 0x51b) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0xc4, &(0x7f0000ffe000/0x1000)=nil, 0x7}) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000240)) fchownat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x7, 0x8000, 0xe4}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="30e2c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES16=r3, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xa8}], 0x2, 0x0) fchownat(r1, &(0x7f0000000200)='./file0\x00', 0x0, r4, 0x1000) [ 310.487575][ T9488] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.0'. 12:25:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000000)={@fixed={[], 0x12}, 0x2, 0x3}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2d00000000003400000060bc7d94004c2c01398000000000000000000000000000bbff0200000000000000000000000000012f00000000000000842022eb"], 0xfdef) 12:25:42 executing program 2: r0 = getuid() getgroups(0x2, &(0x7f0000000000)=[0x0, 0xee00]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) getgroups(0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0x0]) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x500, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)={0x208, 0x0, 0x8, [{{0x2, 0x0, 0x10000, 0x0, 0xffff8000, 0x7, {0x6, 0x233e, 0x5c45e1a2, 0x1, 0x8, 0x1, 0x7f80, 0x20, 0x200, 0x5, 0x63, r0, r1, 0xf29c, 0x2}}, {0x1, 0x8001, 0x5, 0x2, 'GPL@.'}}, {{0x1, 0x1, 0x7, 0x1ff, 0xffff2a85, 0x59, {0x2, 0x7, 0x8, 0x9, 0x0, 0x0, 0xcb, 0x722, 0x3, 0xffffffff, 0xffffffe0, r3, r4, 0xe9e8, 0x400}}, {0x5, 0x0, 0x5, 0x0, 'self@'}}, {{0x2, 0x0, 0x5, 0xe77e, 0xfffff2a3, 0x5, {0x3, 0xfffffffffffffffe, 0x383, 0xfff, 0xffffffffffffff81, 0xfffffffffffffffb, 0x8, 0x59, 0x80000000, 0x8, 0xffffe843, r5, r6, 0x5, 0x5}}, {0x6, 0x80, 0x1e, 0x2, 'eth1cpusetselinuxsecuritynodev'}}]}, 0x208) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000640)={0x4, {0x4, 0x20, 0x5, 0x4}}) r8 = syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0x7fff, 0x545001) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f00000006c0)) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x4280, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) r11 = syz_genetlink_get_family_id$smc(&(0x7f00000008c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x98, r11, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r12 = syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x5, 0x400) sendmsg$NFNL_MSG_ACCT_GET(r12, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa0, 0x1, 0x7, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc12}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x27cf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x27e3c0000000}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24040854}, 0x24000800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000c00)="bebf602c5cc01abd3582fe875f48da3a", 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x2, r2, 0x1, 0x7f, 0x6, @link_local}, 0x14) 12:25:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) geteuid() ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r2) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r3) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x40) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x4}}, 0x10) 12:25:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x10012, r1, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000080)={0x8, "e5ec19509e06932c442dde92d37461cb28865eac12a9a015fc09df37de5b708a49b877e8fd79c172273d9b05c2d1e9d4e82eb2121f5101c4442ba6800074f10507771a38b6d7d3ef5ce41d0b9d0b97eae8c2be1d056cf7cd408ad064ef7d0000c9f5907b5bc47191925b7eaf9f9c6044b6f391704caaf8eefd7203e235cc76c16baf9204b30f194f677284b06bd6a8d52f2ec3fff5270100b83ff61e5b46211e107548e233fb7150ff07000000000000eec6ff2e363c20f5f86176159271bc89926a5087cb75c31213f4232867fe46c4d824d7f84feafc0632741e5f974ede4cf71ac8de064967c532a145e70ebe473cd2ee0200"}) 12:25:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r0, r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x0, 0x10}, 0xc) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{0x77359400}, 0x1f, 0x9, 0x9}, {{r4, r5/1000+10000}, 0x15, 0xfffe, 0x3ff}, {{0x77359400}, 0x4, 0x8a8, 0x462f}, {{r6, r7/1000+60000}, 0x14, 0x9, 0xffffbc3d}, {{}, 0x17, 0x40, 0x4}, {{0x77359400}, 0x15, 0x6, 0x4}, {{r8, r9/1000+60000}, 0x11, 0x9, 0x1e00c60d}, {{0x0, 0xea60}, 0x6, 0x7, 0x2}], 0xc0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3, 0x44c240) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) creat(0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) connect$inet6(r10, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r10, r11, 0x0, 0xedc0) 12:25:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') syz_open_dev$tty1(0xc, 0x4, 0x4) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={{0x0, 0x0, @reserved="f89cfa12fb04b1efb7c3a6d8c94e14e4e46ba27280d337f4ae5c67df86c277a0"}}) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000800)=""/233, 0xe9, 0x160, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000000007000000f640db9820000000000000d403ffff633b27e59aa146174dd106876d173f0fc7ec6e26560000000049d2e181bad9459c5c953948c6a600000000000000c552fc4cfc3cf56c860870ecae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f4d7500002f954c92fad7e34bd5522d45cc36c2642eac2d224609aba9e60000000000000000e2000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981520e03b86d4eb99bbb5b0572a5f5953a8f5d53663191d972fa2a2b847ebf9bb"], 0x1c6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @initdev}, &(0x7f0000000140)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYBLOB="000000000000002800010108000100e7", @ANYRES32, @ANYBLOB="18090200", @ANYRES32=r2, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x40040000) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) [ 311.871110][ T9525] IPVS: ftp: loaded support on port[0] = 21 12:25:43 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r6) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0xfffffffffffffed2) close(r7) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:25:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001, 0x30020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x18802, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040), 0x2) socket(0x21, 0x2, 0x1002) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x155) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x0, 0x10}, 0xc) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) delete_module(&(0x7f0000000180)='wlan1[selfvboxnet1!GPLcpuset^\x00', 0xa00) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x2, 'sh\x00'}, 0x2c) close(0xffffffffffffffff) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 12:25:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@mpls_getroute={0xa0, 0x1a, 0x0, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x14, 0x3a, 0xff, 0x0, 0xc8, 0x8, 0x2400}, [@RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x67c, 0x0, 0x1}, {0x800}, {0x5}, {0xe6700}, {0x5a337}, {0x1}, {0x44a0, 0x0, 0x1}, {0x8ee}, {0x2}, {0x2, 0x0, 0x1}, {}, {0x8}, {0xffffd}, {0x8c, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x7}, {0x3}, {0x5, 0x0, 0x1}, {0xe82, 0x0, 0x1}, {0x5}, {0x2, 0x0, 0x1}, {0xfc0ad}, {0xa77}, {0x6}, {0x8, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x400}, {0x2, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24004008}, 0x20000001) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000004d0c00006e6574651ce10000200002000000000000000000000000000004000200"], 0x50}}, 0x0) [ 312.358411][ T9594] IPVS: ftp: loaded support on port[0] = 21 [ 312.385127][ T9629] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.448475][ T9629] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.502548][ T9525] chnl_net:caif_netlink_parms(): no params data found 12:25:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x6800000e, &(0x7f0000000040)=[{&(0x7f0000000200)="e03f03001d008151e00f80ecdb4cb9047e48651628060e0009000000000000190e000600000000010000000153b4", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000007c0)="2e00000081ef87cf1e000500ed0080648c6394f27e31d30004000b404b48000001000080000060d0cc25f88000f0", 0x2e}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="a058", 0x2}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffd76}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast2}}}], 0x38}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x2e202) dup2(r4, r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7, 0x0, 0x10}, 0xc) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r10}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r10, 0x1c, 0x1, @in={0x2, 0x4e22, @empty}}}, 0xa0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 12:25:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{@none}, {@none}]}) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff00000200be7802000605000003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160008000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) [ 312.719426][ T9662] IPVS: ftp: loaded support on port[0] = 21 [ 312.913628][ T9694] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 312.922081][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.044236][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.051951][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.061321][ T9525] device bridge_slave_0 entered promiscuous mode [ 313.087648][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.095084][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.104893][ T9525] device bridge_slave_1 entered promiscuous mode 12:25:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7b) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x14}, 0x1c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4, 0x0, @empty, 0x5}, 0x3b) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200101, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r3, 0x503, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d1c8974d2ab52c59b5", @ANYRES16=r3, @ANYBLOB="00032cbd7000fcdbdf250c0000000800060097020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) close(r1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @private2, 0x7c}, {0xa, 0x4e24, 0x1, @ipv4={[], [], @empty}, 0x3}, 0x8, [0xfffffffc, 0x1, 0x40000006, 0x4, 0x2, 0x9, 0x2a9, 0x8003]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x28) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 313.226164][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.271315][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.284622][ C0] ===================================================== [ 313.290454][ C0] BUG: KMSAN: uninit-value in ip6_parse_tlv+0x8b8/0xcb0 [ 313.290454][ C0] CPU: 0 PID: 9730 Comm: syz-executor.0 Not tainted 5.7.0-rc4-syzkaller #0 [ 313.304050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.304050][ C0] Call Trace: [ 313.304050][ C0] [ 313.304050][ C0] dump_stack+0x1c9/0x220 [ 313.304050][ C0] kmsan_report+0xf7/0x1e0 [ 313.304050][ C0] __msan_warning+0x58/0xa0 [ 313.304050][ C0] ip6_parse_tlv+0x8b8/0xcb0 [ 313.304050][ C0] ipv6_parse_hopopts+0x493/0x7c0 [ 313.304050][ C0] ip6_rcv_core+0x1b08/0x1ff0 [ 313.304050][ C0] ipv6_rcv+0xe3/0x710 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] process_backlog+0xa41/0x1410 [ 313.304050][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 313.304050][ C0] net_rx_action+0x786/0x1aa0 [ 313.304050][ C0] ? net_tx_action+0xc30/0xc30 [ 313.304050][ C0] __do_softirq+0x311/0x83d [ 313.304050][ C0] do_softirq_own_stack+0x49/0x80 [ 313.304050][ C0] [ 313.304050][ C0] do_softirq+0xed/0x150 [ 313.304050][ C0] netif_rx_ni+0x202/0x3b0 [ 313.304050][ C0] dev_loopback_xmit+0x58a/0x630 [ 313.304050][ C0] ip6_finish_output2+0x2332/0x2640 [ 313.304050][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 313.304050][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 313.304050][ C0] ? validate_xmit_skb+0x1660/0x1660 [ 313.304050][ C0] __ip6_finish_output+0x824/0x8e0 [ 313.304050][ C0] ip6_finish_output+0x166/0x410 [ 313.304050][ C0] ip6_output+0x60a/0x770 [ 313.304050][ C0] ? ip6_output+0x770/0x770 [ 313.304050][ C0] ? ac6_seq_show+0x200/0x200 [ 313.304050][ C0] ip6_local_out+0x164/0x1d0 [ 313.304050][ C0] ip6_push_pending_frames+0x213/0x4f0 [ 313.304050][ C0] rawv6_sendmsg+0x4233/0x5c30 [ 313.304050][ C0] ? balance_callback+0x48/0x270 [ 313.304050][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 313.304050][ C0] ? udp_cmsg_send+0x5d0/0x5d0 [ 313.304050][ C0] ? compat_rawv6_ioctl+0x100/0x100 [ 313.304050][ C0] inet_sendmsg+0x2d8/0x2e0 [ 313.304050][ C0] ? inet_send_prepare+0x600/0x600 [ 313.304050][ C0] ____sys_sendmsg+0x1056/0x1350 [ 313.304050][ C0] __sys_sendmmsg+0x5fe/0xd60 [ 313.304050][ C0] ? kmsan_internal_set_origin+0x75/0xb0 [ 313.304050][ C0] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 313.304050][ C0] ? kmsan_copy_to_user+0x81/0x90 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 313.304050][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 313.304050][ C0] ? prepare_exit_to_usermode+0x1ca/0x520 [ 313.304050][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 313.304050][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 313.304050][ C0] do_syscall_64+0xb8/0x160 [ 313.304050][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 313.304050][ C0] RIP: 0033:0x45ca69 [ 313.304050][ C0] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.304050][ C0] RSP: 002b:00007f175ded2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.304050][ C0] RAX: ffffffffffffffda RBX: 00000000004fc5c0 RCX: 000000000045ca69 [ 313.304050][ C0] RDX: 00000000000001a3 RSI: 0000000020002cc0 RDI: 0000000000000003 [ 313.304050][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 313.304050][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 313.304050][ C0] R13: 00000000000008dd R14: 00000000004cba5f R15: 00007f175ded36d4 [ 313.304050][ C0] [ 313.304050][ C0] Uninit was created at: [ 313.304050][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 313.304050][ C0] kmsan_slab_alloc+0x8a/0xe0 [ 313.304050][ C0] __kmalloc_node_track_caller+0xb40/0x1200 [ 313.304050][ C0] __alloc_skb+0x2fd/0xac0 [ 313.304050][ C0] __ip6_append_data+0x490c/0x63e0 [ 313.304050][ C0] ip6_append_data+0x3cb/0x660 [ 313.304050][ C0] rawv6_sendmsg+0x32bb/0x5c30 [ 313.304050][ C0] inet_sendmsg+0x2d8/0x2e0 [ 313.304050][ C0] ____sys_sendmsg+0x1056/0x1350 [ 313.304050][ C0] __sys_sendmmsg+0x5fe/0xd60 [ 313.304050][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 313.304050][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 313.304050][ C0] do_syscall_64+0xb8/0x160 [ 313.304050][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 313.304050][ C0] ===================================================== [ 313.304050][ C0] Disabling lock debugging due to kernel taint [ 313.304050][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 313.304050][ C0] CPU: 0 PID: 9730 Comm: syz-executor.0 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 313.304050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.304050][ C0] Call Trace: [ 313.304050][ C0] [ 313.304050][ C0] dump_stack+0x1c9/0x220 [ 313.304050][ C0] panic+0x3d5/0xc3e [ 313.304050][ C0] kmsan_report+0x1df/0x1e0 [ 313.304050][ C0] __msan_warning+0x58/0xa0 [ 313.304050][ C0] ip6_parse_tlv+0x8b8/0xcb0 [ 313.304050][ C0] ipv6_parse_hopopts+0x493/0x7c0 [ 313.304050][ C0] ip6_rcv_core+0x1b08/0x1ff0 [ 313.304050][ C0] ipv6_rcv+0xe3/0x710 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] process_backlog+0xa41/0x1410 [ 313.304050][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 313.304050][ C0] net_rx_action+0x786/0x1aa0 [ 313.304050][ C0] ? net_tx_action+0xc30/0xc30 [ 313.304050][ C0] __do_softirq+0x311/0x83d [ 313.304050][ C0] do_softirq_own_stack+0x49/0x80 [ 313.304050][ C0] [ 313.304050][ C0] do_softirq+0xed/0x150 [ 313.304050][ C0] netif_rx_ni+0x202/0x3b0 [ 313.304050][ C0] dev_loopback_xmit+0x58a/0x630 [ 313.304050][ C0] ip6_finish_output2+0x2332/0x2640 [ 313.304050][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 313.304050][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 313.304050][ C0] ? validate_xmit_skb+0x1660/0x1660 [ 313.304050][ C0] __ip6_finish_output+0x824/0x8e0 [ 313.304050][ C0] ip6_finish_output+0x166/0x410 [ 313.304050][ C0] ip6_output+0x60a/0x770 [ 313.304050][ C0] ? ip6_output+0x770/0x770 [ 313.304050][ C0] ? ac6_seq_show+0x200/0x200 [ 313.304050][ C0] ip6_local_out+0x164/0x1d0 [ 313.304050][ C0] ip6_push_pending_frames+0x213/0x4f0 [ 313.304050][ C0] rawv6_sendmsg+0x4233/0x5c30 [ 313.304050][ C0] ? balance_callback+0x48/0x270 [ 313.304050][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 313.304050][ C0] ? udp_cmsg_send+0x5d0/0x5d0 [ 313.304050][ C0] ? compat_rawv6_ioctl+0x100/0x100 [ 313.304050][ C0] inet_sendmsg+0x2d8/0x2e0 [ 313.304050][ C0] ? inet_send_prepare+0x600/0x600 [ 313.304050][ C0] ____sys_sendmsg+0x1056/0x1350 [ 313.304050][ C0] __sys_sendmmsg+0x5fe/0xd60 [ 313.304050][ C0] ? kmsan_internal_set_origin+0x75/0xb0 [ 313.304050][ C0] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 313.304050][ C0] ? kmsan_copy_to_user+0x81/0x90 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 313.304050][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 313.304050][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 313.304050][ C0] ? prepare_exit_to_usermode+0x1ca/0x520 [ 313.304050][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 313.304050][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 313.304050][ C0] do_syscall_64+0xb8/0x160 [ 313.304050][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 313.304050][ C0] RIP: 0033:0x45ca69 [ 313.304050][ C0] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.304050][ C0] RSP: 002b:00007f175ded2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.304050][ C0] RAX: ffffffffffffffda RBX: 00000000004fc5c0 RCX: 000000000045ca69 [ 313.304050][ C0] RDX: 00000000000001a3 RSI: 0000000020002cc0 RDI: 0000000000000003 [ 313.304050][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 313.304050][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 313.304050][ C0] R13: 00000000000008dd R14: 00000000004cba5f R15: 00007f175ded36d4 [ 313.304050][ C0] Kernel Offset: 0x28800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 313.304050][ C0] Rebooting in 86400 seconds..