', 0x2}, &(0x7f0000000a00)="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", 0x4c1, r0) 22:18:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getpgrp(0x0) fcntl$lock(r1, 0x26, &(0x7f0000000240)={0x0, 0x1, 0xfffffffffffff56e}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000b3d4b5a677e3da560006004000"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x200100, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000180)={0x0, 0x7f}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="ab7700003ede4d8c9e06a1053c772ec037c72bb0ffd4286331956d7dbc5016fa324daeb9873bf6680ca0e06fc1e374fd712293855de7caf5d2123ae1058fcd", @ANYRES32=r7, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) [ 451.736196][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 451.824358][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:18:40 executing program 0: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = open(&(0x7f0000000140)='./file0\x00', 0x401, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x10402, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4100, 0x1004}], 0x1, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1) socket$xdp(0x2c, 0x3, 0x0) 22:18:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400c985857fc4bc8ebb70a47cd69f1909e484be387e9ae0210d88b8e000d90f0005", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000a00000000000800030020000000"], 0x44}, 0x1, 0x6000000}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x1) [ 451.877851][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 22:18:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x7, 0xdf, 0x70, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r2}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fc12100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) 22:18:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0xc0d58860b4c77945, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0xfffffffd, 0x0, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', 0x800}) 22:18:41 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/10, 0xa, 0xffffffffffffffff}}, 0x10) open$dir(&(0x7f0000000100)='./file0\x00', 0x40800, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000e634e60fdca87ad257750000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r1) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x309, r2) r3 = add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="1523b8fe66174481b7a93c867222269c5af5e3a4f97f0148a9d550603df56d4b3cc1c44935c46a6df552729dc34cd1761db4016fe223b65a04ef837afa71c4c83f70d3f2319e936bf641288a2a373a78828d813eb9995077655a81dfaeaaa0ae0c16605078c8060420668c30901fddb3dbc35ce21f74123f47c2206a0fdf303e3fc3c25844c94599a314c1bc3429d1d22133ac7ef9c575b2ded4cda099a9441da73dd4591e3a135f155d51007c009efe6b8c1618194e5152d18d0b51659c4c33e9a045a83d209bfd91fd43302e2bea76611763088117afe8d3fa4e9f48f79dcf2526d635fac51a7d80a886df149ce5c9c6aa9df818dd81c2", 0xf8, r2) keyctl$describe(0x6, r3, &(0x7f0000000340)=""/242, 0xf2) 22:18:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r5, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x117}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendto$inet(r0, &(0x7f0000000000)="c30e086ca96bbaf2fccc96a87059e2094d44957162cb1698430920ad11c28af71b11fb56f37c8bb43ca25ccacf38736adc64780e0bca9187f09b376b201494d99380ad26229a6d38344912caf5700958de09c667f41f3a7f174b76b53fe78dce789a9a28903dfcf4551ff5463ea4a18723cdd460f5ea748f10052f4f119abde09b0b4a58ab74993476e93c421f0a805c6c5661ed30383e1e36320b8b27e0b0db7dd4cd4ca613cd690b49457bd4165f50e613bab3ebcac160e74d273585a2f0c6b809ff8c0222e2071276353635d011032daba8530097bf916cd930779ae4628759dfaae2e56929495cfce28f515e69", 0xef, 0x40000, 0x0, 0x0) r11 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000100)='veth0_to_hsr\x00', 0x1c0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 452.382609][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 452.407618][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.416245][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:18:41 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) r2 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0xffffffaf, 0x7, 0x4, {0x9, @sdr={0x32525942, 0xdd67}}, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00}) socket(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x200, 0x4) [ 452.880770][T11698] tipc: Started in network mode [ 452.886170][T11698] tipc: Own node identity aaaaaaaaaa2f, cluster identity 4711 [ 452.894209][T11698] tipc: Enabled bearer , priority 10 [ 452.929568][T11713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 452.949390][T11713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.957926][T11713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:18:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x0, 0x7f) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet(0xa, 0x801, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000400)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1ff, 0x7, 0x3, 0xfff, 0x3ff, 0x3, 0x3ff, 0xd306, r3}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x7ff}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sendto$inet6(r1, &(0x7f0000000140)="9233effc8e3a4c655405564c3195ed9aa2e4895960a2fdeb75e92bcfced9db0d3c53d12834611dad2430650d398e3b19811b6cb5f9de28830546864acd43d3d76bebfeb4e035634a16519229f9544ac7f177608aeb840e9e84fcf5ae227ce3e811c7ed399b85359e8a57205328e80a041a47514e6c", 0x75, 0x20000010, &(0x7f00000000c0)={0xa, 0x4e22, 0x101, @mcast1, 0x7fff}, 0x1c) close(r8) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r9) mq_notify(r9, 0x0) ioctl$KDSKBLED(r9, 0x4b65, 0x0) mq_notify(r8, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000240)) ioctl$EVIOCGMTSLOTS(r8, 0x8040450a, &(0x7f0000000000)=""/111) [ 453.257505][T11706] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 453.297434][T11698] tipc: Enabling of bearer rejected, already enabled [ 453.329241][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 22:18:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000050700000000024ada8900000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000d0040000000"], 0x3c}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x10001) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x4e23, @multicast2}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0xfffffffffffffec3) 22:18:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x3, 0x800}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x51, "62d5d1d0d10a55719a99de7f34afea65e7870dc2405466a3f2166a24521fb040aea5d45ad58c1183b4175a9e9ea31b723ca34273fa12650edaa3c0d653b6c8ac6eec0282a89340124a56ec0cba526f44ac"}, &(0x7f0000000240)=0x75) close(r2) mq_notify(r2, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x20000004}, 0x48020) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 22:18:42 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r1, 0x0, &(0x7f0000000140), 0x800) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x800c, 0x1, 0x9, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x1}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}}, 0x0) 22:18:43 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") r1 = socket$inet(0xa, 0x6, 0xf8) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x83) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_buf(r2, 0x84, 0x6, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20002, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)={'syz1', "e58cfa5f2efd50a5f1fb6df505b7a01badfe04bba637b46f87013616524e65ae9b5633afc04dfcc7a610ee28aca036a3c76a33be874f4533ee2e9553611d1a35ea7472251763d722be9d67184f714ce468a641d62be76e0546b256e4dd9c8a8894b16a437f87c950c1"}, 0x6d) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140), 0x4) [ 454.025367][ T2765] tipc: 32-bit node address hash set to aaaa8500 22:18:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x78, 0x6, 0x101, "5e560deb31a122c7bb06c7a80e6e055d39d808e0eceea2eac116039f2f2dc1c5fdd89afa0cc4ddabb6f34242dc761077bcced267572037643650f0deb02afa0bd5d953a406dafa649ee4c03dbfa4e9b531d204bba866b4e622484aa1b4be7f27897bd87939e097d8fccbabe5a9654fb8bdfb8fa246f6ffca"}) 22:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000140)={0x7b}) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:18:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) setsockopt$inet6_dccp_int(r4, 0x21, 0x1, &(0x7f0000000080)=0x6, 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) ioctl$void(r1, 0x5450) 22:18:44 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @loopback}, 0x81, 0x0, 0x0, 0x0, 0xeb7d, &(0x7f0000000080)='ip6gre0\x00', 0x9, 0xbd7f, 0x3}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206e7180000005ed800000000000000060780080012409effffff090002da73797a310000000500040000000000050005000200502a081100000000000000000000000000000032d6451b4c44c22df4fee063509c2b020b9aa50a3d1feabbb0c5e901044fa7f4f7c69b9b"], 0x1}, 0x1, 0x0, 0x0, 0x840}, 0x14005) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x10}}, 0x14) 22:18:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000140104000000000000a01d832f38844968d356ab2a4cff16", @ANYRES32, @ANYBLOB="14003ae09bed01007b6ff46d9eb9e72cef8a2d0f6901152108000800a6060000"], 0x34}}, 0x0) 22:18:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x0, 0x0, 0x10, 0x0, "26f893b6c50da3893a6208c6a84459886eb8732c148bcf8a57c043bc662545cda5b39651e5d34595b617122012175db3b810e8d578a47c82782442d6d8bdec9c2b11a758f0fc00"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x9b) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @rand_addr=0x5}}, 0x0, 0x0, 0x25, 0x0, "b3a74d28ffa8eb604ee5029b460ab8a5bd58e8fc0f8a5b5d9b8ab2097027b2b928d55e56614101756e375e2ec647725fa140d172b34a1c0653243252acf72e555e539450f93646ae2e8a047ccdfc55eb"}, 0xd8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="84", 0x1, 0x200400d4, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x141041, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=@gettaction={0xa8, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x697}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfcbf}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 22:18:44 executing program 4: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x4, 0x5, 0x7d6, 0x1ff, 0x1ff}, 0x14) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x4, 0x400800) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) rt_sigqueueinfo(r3, 0x26, &(0x7f0000000100)={0x1, 0x9, 0x101}) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@empty}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000300)={0x1, 0x4, 0x4, 0x1, 0x8, {0x0, 0x2710}, {0x5, 0x1, 0x2, 0x6, 0x8, 0x0, "2675b039"}, 0x7ff, 0x3, @fd, 0x401, 0x0, r0}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000380)=0x1000) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x8200, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000400)=@usbdevfs_disconnect={0x1}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x1500, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x100, 0x1403, 0x200, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000011) prctl$PR_GET_CHILD_SUBREAPER(0x25) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000640)='/dev/cachefiles\x00', 0x8000, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r8, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ad94820}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x596204d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc230318}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b9d874a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15f35f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x676d7276}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000880)={0x0, 0x37, "b29c14c0265a64c77362aa001cc8e6b12c06ae891dd07ec2f024450c73d0fa5240bf55d40424a9393dcc40ddeb60bb52680aaf6e2ca809"}, &(0x7f00000008c0)=0x3f) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000900)={r9, 0xdf, "29db20d9538e2b77a28484ff60ff4998fefd16dee20743260b4608f516a49a56899b1dbd4aa4b1bd0fc080822618d464696558c44827166e47012cdabfb9c650eef601c3f38aa523dfc75ab94ab417ac96fa14fe1096e9235854ce8894048a03544439757eeb7f75e1376dfb051ee6f147b88b41693ae6c9945427c961f7cbd6e67501c9178d6044f63bbbd463ca714a7b0e200fc9152b9965e294013b21c8f94b520d4fe58a4712a2f8242e4485d89ad4391d447012149aff4ad8dc285418c0bea6a3280ebfe784f43f8cfcfbb0bb3e9d1c5db46482aed08ddb42d3978096"}, &(0x7f0000000a00)=0xe7) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000a40)={0x6, 0xc, 0x4, 0x4, 0x9, {}, {0x1, 0x1, 0x20, 0x0, 0x9, 0x4, "945cab55"}, 0x7, 0x4, @userptr=0x3, 0xfffffffd, 0x0, r1}) bind$inet6(r10, &(0x7f0000000ac0)={0xa, 0x4e20, 0x0, @empty, 0xfffffffb}, 0x1c) fcntl$setownex(r1, 0xf, &(0x7f0000000b00)={0x1}) sysfs$1(0x1, &(0x7f0000000b40)='/dev/v4l-subdev#\x00') r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vsock\x00', 0x4002, 0x0) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000d40)=@urb_type_iso={0x0, {0x1}, 0x1, 0x0, &(0x7f0000000bc0)="f6b60899211c9391aad25d0e4a19b201ed93d26403e6777ab2ebe81bc89df3c970612624c376fc44dd9926b4cf90c28254be1c06b888a298fde7f062b6ec3090905bbccb53ff66cc4d4cc4a6b729", 0x4e, 0x2, 0x100, 0x4f, 0x9, 0x7, &(0x7f0000000c40)="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", [{0x4, 0x1, 0x5101}, {0x2, 0x7, 0xa66f}, {0x5, 0x80000001, 0x5}, {0x5, 0x5, 0x6}, {0x0, 0x7ff, 0x3}, {0x90000000, 0xe41f, 0x5}, {0x800, 0x1ff, 0x2}, {0x7, 0x5, 0x20000}, {0x7f, 0x1ff, 0xf47}, {0x8, 0xc5, 0x3ff}, {0x1, 0x81, 0xfffffff8}, {0x7, 0x0, 0x36}, {0x101, 0x0, 0x8}, {0x6, 0x7, 0x8dab}, {0x621a, 0x800, 0x8001}, {0x5, 0x3, 0x1}, {0x4, 0x3, 0x101}, {0xffff8000, 0x1, 0x2}, {0xcb, 0x6, 0x33}, {0x670, 0x9, 0x1000}, {0x7, 0xc2ec, 0x6}, {0x1, 0x7f, 0x400}, {0x200, 0x2, 0xffffc7ff}, {0x6, 0x401, 0x7fff}, {0xd6f1, 0x5, 0x101}, {0xffff0000, 0x1, 0x8}, {0x10000, 0x0, 0xfffffff8}, {0x1, 0x3f, 0x3ff}, {0xd6, 0x7f, 0x9098}, {0x80, 0xffffffb6, 0x1f}, {0x1, 0xffffffff, 0x2}, {0x800, 0x7fff, 0x8}, {0x7f, 0x5, 0x80}, {0x1000, 0x8, 0x6}, {0x9b, 0x9, 0x1}, {0x40, 0x9, 0x7}, {0x81a4, 0x2, 0x1}, {0x3, 0x9, 0x2}, {0x3b, 0xfff, 0x6}, {0x40, 0x7, 0xda}, {0x10001, 0x3, 0x6ca7}, {0x4a3, 0x9, 0x258e}, {0x7f, 0x5, 0x3ff}, {0x0, 0x4bc, 0x2}, {0x4, 0x49e, 0x3}, {0x5, 0x4, 0x4}, {0x9278, 0x40, 0x10001}, {0xfffffca6, 0xb83, 0xf0}, {0x7, 0x4, 0x3}, {0x0, 0x72, 0x800}, {0x5, 0x4, 0x994}, {0x10001, 0x8001, 0x200}, {0x200, 0xfffffffc, 0x8001}, {0x1, 0x1}, {0x41d4, 0x7, 0x101}, {0x4, 0x0, 0x1}, {0x7, 0x4, 0xf9e}, {0x10001, 0x3ff, 0xffffffff}, {0x1, 0x1, 0x9}, {0x8, 0x6, 0x3}, {0x401, 0x3f, 0xffff}, {0x3, 0x2, 0x80}, {0x8, 0xfff, 0x3}, {0x80000000, 0xe4, 0x10000}, {0x7f, 0xab2}, {0x401, 0xd3ea, 0xb0a}, {0x5, 0x0, 0x9}, {0x1, 0x7, 0x4}, {0x0, 0x5, 0x5ebd}, {0x2, 0x2, 0xdf89}, {0x8, 0x108000, 0x5}, {0x80000000, 0x7, 0x6981c4d}, {0x5e, 0x5}, {0x2, 0x1000, 0xffff}, {0x6, 0x5, 0x4}, {0x5, 0x8, 0x2}, {0x80000000, 0x8, 0x2}, {0x101, 0xffffffff, 0x7}, {0x3, 0xd6d8, 0x1}]}) personality(0x400000d) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r12, 0xc01464a6, &(0x7f0000001180)={0xfffffff9}) 22:18:44 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000800) r0 = socket(0x14, 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000002c0)=""/227, &(0x7f00000003c0)=0xe3) close(r4) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) mq_notify(r4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000111420002bbd70788e0877dcf021082afebae6d7c5e40770b45300fedbdf25080001000000100487ffea597ef45639244bb08e7618cc020e02f7fd6d75e0e395e1d7d0113955b4a72fd23760defe3e3ea27309ed0ad11aa3abd16bef907c9b947fd677ad52b50986d52100cc9fdfbeb25bd21f9c9a28a98e52ed0063033dab4acac70667dfdbac28556c723f4818a62243be7a76ad1b8e311fa0c92a1a85a18059daffb7f7e84af2681e660cd4bc0d7bce7130b212fccecbecd927f195cf2f"], 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x11) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'veth0\x00', {0x2, 0x4e23, @local}}) r5 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32, @ANYBLOB="e5fb0400bddd00020800160005000000"], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:18:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="1d917fc2a100001000"/24, 0x18) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000001, 0x480800) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000001c0)=r5) 22:18:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="a2", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) 22:18:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', r4}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="721c7ddc", 0x4) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="1420b200", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) recvfrom$inet(r5, &(0x7f0000000300)=""/219, 0x8, 0x0, 0x0, 0x0) 22:18:44 executing program 0: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000e10000/0x1000)=nil, 0x1e76b3f7e83c0d66) unshare(0x8000400) shmget$private(0x0, 0x4000, 0x1801, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x1e76b3f7e83c7d66) 22:18:45 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x800, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYPTR64, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="e47e6d21f32a8aeb65365c54f972e7c2902bc0f68f797185f8765f5c2bd081734f6384ba364971c61b06009843b60e04660fda3845934c6fc73ea87146955a609465704cfbc6e5d42d0a6171a2d8e9b240b86afa6e1c8ef02b91a424e93726b32c3fe24c325e7c8ffc06fa112b800653bdc003205bebd560d204a227fabad5c7f3af5d2828ba62bff95f796d2eecf3318952023ec24bf7813bb3d495bf7fb107a4bb686b4f5c33d16c6cd817f0fba783d05c062c1c66afa9bc0d8bfbbcc50906dbaff2491e69e9e03f5a05f12ab100000000", @ANYRES16, @ANYRESHEX], @ANYRES32, @ANYRESOCT], @ANYRES16, @ANYRES64=0x0, @ANYBLOB="bdc75d69bcdf8cc36341bcefbcd717c2bc5aa7c2a878b9bfb0b854f09474fbbdc013411daf60ccb13bc3384e5eeb088a6cc9c4a040c884beadd4e5703da1332181492ae707d39f146d72673de4f2a1f3c7ee6d1eb92dfe34973cff889cef421f788cc9aec757bc09653082f2d56ae0e889842eed9fbb151459869da2f98fe504b49f84c2fdf95e0601aa37899ca67413bed1ac544014bb9ed3228d2cfbc5e4c62bf9992e70f21f5a5860f309002691e84f4e1d9b6f04a92466b5a3267bdce7847bf8ed02da87bde73f76c8282b43021e58dfac"], 0x10523) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="83755a8b7c9abdfa6d790f4ab322cd3782dfc9d8ffd41cdbc4a7956b05e0361a19f161b3a4c1985951652214a8693c2129fa1f062bd24b4c9d3775497ed6b3a35bc789cf00ee54a638e5331b1c2b8c8eeb524ad1454c075bb62a12a085f41f221bea219d365ac692f98fcd65544faf2702bd843678c3ca1fdb340e2ee140f991b312698c67e9435cbbc92e6d734f904f67fee60357437f05a776f85d618649323eddac7790cdaa91c8a69d4cae5724776a70d2d3b2e3717ff73b2f9c9e0f12ae773386a8da8d2e3a1de52e263e674bf1923d03ec7f92aee35cfe783beabc"], 0x1a000) 22:18:45 executing program 1: capset(&(0x7f0000000000)={0x24020019980330}, &(0x7f0000000140)) r0 = dup(0xffffffffffffffff) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xfa, 0x0, 0x4, "10025810b895b02e9808a2de9532126e", "9099a2db1e8b1cf8cc1e4170d71c31483b87dddd750b6560920b5a7114af3739aa9b515d85989de2487b102e4589c60bc6b90fe6b92653b0964022c5b5a64d52684ca63e2c82c1e10aa764768517fc8e071f303b67c4b226c8fdded5ad7d222c8ffb5ef4acf5c4b5f0469a892fb98ba9754eaf42357bddc01f0ed543ecd3264014006a013cf350dbd034f0ed26c9b0c84cd836e9cc568e291fd393476a772cae8c2807b1e70ab3722256a8698c97ed311f5abb57d42a6a81853f2b41d3964f588f137064798d05434ae16d417ff2b04de41f9054689d020d07cc4276bd6c9ec9f5e6761d76"}, 0xfa, 0x3) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400191809604beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00cde5ed5e00000000000000", 0x48}], 0x1) 22:18:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000080), &(0x7f0000000140)=""/134, 0x86}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$inet(0xa, 0x801, 0x0) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x7d, &(0x7f0000000400)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1ff, 0x7, 0x3, 0xfff, 0x3ff, 0x3, 0x3ff, 0xd306, r6}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6, 0x4}, &(0x7f0000000040)=0x8) 22:18:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) 22:18:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1f4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:18:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000200)={{0x1, 0x0, @identifier="dc94669190518875cfa28be22ef75650"}}) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xf0}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1a}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}}, 0x0) [ 456.926972][T11833] input: syz0 as /devices/virtual/input/input7 [ 456.956782][T11832] team0: Device ip6tnl1 is of different type [ 457.061607][T11836] input: syz0 as /devices/virtual/input/input8 [ 457.625599][T11842] IPVS: ftp: loaded support on port[0] = 21 [ 458.059159][T11842] chnl_net:caif_netlink_parms(): no params data found [ 458.417347][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.424789][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.434710][T11842] device bridge_slave_0 entered promiscuous mode [ 458.486917][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.494486][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.504229][T11842] device bridge_slave_1 entered promiscuous mode [ 458.596363][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.632982][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.692730][T11842] team0: Port device team_slave_0 added [ 458.711092][T11842] team0: Port device team_slave_1 added [ 458.755826][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.762898][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.789438][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.865595][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.872677][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.900375][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.123742][T11842] device hsr_slave_0 entered promiscuous mode [ 459.157938][T11842] device hsr_slave_1 entered promiscuous mode [ 459.196852][T11842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.204647][T11842] Cannot create hsr debugfs directory [ 459.525281][T11842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.574503][T11842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 459.701537][T11842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 459.842625][T11842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.232807][T11842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.262635][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.272885][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.299570][T11842] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.337516][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.349038][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.358589][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.365886][ T2765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.377642][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.395917][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.406129][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.415817][T11077] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.423053][T11077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.499076][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.511206][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.522415][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.533275][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.544158][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.554853][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.565708][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.575460][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.587151][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.597209][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.622416][T11842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.686632][T11842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.783773][T11842] device veth0_vlan entered promiscuous mode [ 460.792641][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.803050][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.811028][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.819061][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.830183][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.840329][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.850124][T11077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.871197][T11353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.881093][T11353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.918893][T11842] device veth1_vlan entered promiscuous mode [ 460.995177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.005011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.014964][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.026262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.052162][T11842] device veth0_macvtap entered promiscuous mode [ 461.075663][T11842] device veth1_macvtap entered promiscuous mode [ 461.126737][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.136897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.157482][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.168560][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.178990][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.189569][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.211693][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.222395][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.232683][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.243939][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.259359][T11842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.272906][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.283445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.342204][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.353099][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.366046][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.377008][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.387426][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.398220][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.408831][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.419504][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.434531][T11842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.445705][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.456407][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.897039][T11850] QAT: Invalid ioctl [ 461.918233][T11850] QAT: Invalid ioctl 22:18:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000200)={{0x1, 0x0, @identifier="dc94669190518875cfa28be22ef75650"}}) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xf0}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1a}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}}, 0x0) 22:18:51 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x180) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) sendto$unix(r0, &(0x7f00000000c0)="bf8d00e41bb9826428dcb3e78b72cd3d31f1babca6895f4d7c71c2f565dfb5c77bf8039dddfae3ed1456fb2b3d340767d0ec393be7d9d551b96f8bba29ea3246fcc8c7f4672fdb6cc5342dfb52c1fd47c9a30b566166a6df0738e221d78bf12cae97923ae5c0887580c1b543448cfb2957382f8e530ee69a2c55b50deff107ae7b225f5deb43c006a0e5d3be27c3f6b235adefae7eda44cda13f35ef2d5b3fa6844f170ec9fa4216b22d0ab8a24a14ae7ccbe874a3092625c807f65bedc49a94e7d02ae9d1587726b0c0cc646829af878257ea7426c152da5426", 0x130, 0x40080, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback={0xfec0ffff00000000}}}}], 0x28}}], 0x2, 0x0) 22:18:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = dup3(r1, r2, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0xe) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = getpgid(r4) write$P9_RGETLOCK(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="280000003701000200"/24, @ANYRES32=r5, @ANYBLOB='\n\x00l!&$^-\'[!&'], 0x28) ioctl$SG_GET_NUM_WAITING(r0, 0x2272, &(0x7f0000000200)) 22:18:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bind$inet(r5, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r5, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) readv(r7, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r6, 0x40086424, &(0x7f0000000300)={r8, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000200)={r8, &(0x7f00000001c0)}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000100)={r8, 0x2, &(0x7f0000000000)=[0x1000, 0x23e9], &(0x7f0000000040)=[0x0], 0x20, 0x3, 0x0, &(0x7f0000000080)=[0x4, 0x20, 0x9], &(0x7f00000000c0)=[0x80, 0x6d86710b, 0x9, 0x4, 0x2, 0x9]}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) fallocate(r0, 0x11, 0x0, 0x100000001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f04eb51c8141dcba59d258234f8eeff468e3fa29b016eede67c467ea3bf11dc7ef2d2ac500163045a64863b80422ee7c6544a98996a5e5bcfc7bcd4cee65df77", "c18ccf970cf31e1d17b37ca18c07c9ee40b373881f41ca1f33c9d2ed9222b5aa2f4395b660e52b30cf7c9509b58a9c54278f789922fabe1bfd355b0a15880697", "872a5fb00757d7f6dd615c6b099a99778b2af53085f3d569523b67a66a2aaa52"}) 22:18:51 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x42805) write$binfmt_misc(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="5300000044a6aeb1ec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17ff0300006e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d275014ae"], 0x6c) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) eventfd(0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xd365f25c7bcc638c, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) io_setup(0x5f, &(0x7f00000000c0)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) io_submit(r1, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000040), 0xa}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x88b81, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video1\x00', 0x2, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/tty/ldiscs\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) [ 462.146689][T11859] team0: Device ip6tnl1 is of different type 22:18:51 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', r3}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0xffff, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) dup3(r0, r1, 0x0) r4 = syz_open_dev$swradio(0x0, 0x1, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) [ 462.301280][ C1] sd 0:0:1:0: [sg0] tag#1755 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.312160][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB: Test Unit Ready [ 462.318939][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.329422][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.339552][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.349435][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.359424][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.369989][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.380618][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.391115][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.401386][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.411985][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.422455][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.433268][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.443475][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.453659][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.463649][ C1] sd 0:0:1:0: [sg0] tag#1755 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:18:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xe) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$poke(0x5, r2, &(0x7f0000000100), 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="abba0100000000002800128008000100767469001c00028008000400ffffffff08000500e000000208000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004000000000000009e7e19c946c521de66ecb3956e07d03da898b1cc"], 0x58}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0xe) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='status\x00') 22:18:51 executing program 0: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x101, 0x3, {0x0}, {0xee00}, 0x2, 0x80000001}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2e0542, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, r1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffec2, 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) ioctl$TIOCNXCL(r4, 0x540d) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) getpgid(0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) write$P9_RCLUNK(r7, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) ftruncate(r7, 0x80006) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r8) mq_notify(r8, 0x0) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r9) mq_notify(r9, 0x0) sendfile(r6, r9, 0x0, 0x7) 22:18:51 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) setns(r1, 0x7a000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r2 = gettid() r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0x3085, 0x2d, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1002, 0x0, 0x30051, r5, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000a40)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0) 22:18:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0xffffffffffffffff, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x40000, 0xe34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x3, 0x3fe2}) mq_notify(r2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000040)=0x101) clone(0x40820000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 462.869361][T11876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:18:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf719]}, 0x45c) 22:18:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="680000001100010500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000034001600300001002c000c0014000100000000000000000000000000000000394300010000000000000000000000000000000000140003006e657464657673696d30000000000000"], 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492631, 0x0) 22:18:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000063de2c)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x3c}, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x44001) 22:18:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000}) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xc6, &(0x7f0000000280)=[{&(0x7f0000000000)="2e0000005200851a01f280854a36b8ab1c9599161a000700030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) [ 463.312364][T11887] IPVS: ftp: loaded support on port[0] = 21 [ 463.338407][T11890] input: syz1 as /devices/virtual/input/input9 [ 463.471283][T11892] input: syz1 as /devices/virtual/input/input10 22:18:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x8707, 0x30}, 0xc) ftruncate(r2, 0x200004) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x6}) sendfile(r0, r2, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/102, &(0x7f00000000c0)=0x66) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000002c0)) 22:18:52 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="487de9938bf498929924984c41283c3acdf0d93e387d05fb48e5d77bff1cc7dd79", @ANYBLOB="000000000a0001000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x44040}, 0x4000800) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000240)=""/4096) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x401, 0x0, 0x4, 0x0, 0x3, {}, {0x1, 0x0, 0x3, 0xc6, 0x2, 0x9, "dcf92c9c"}, 0x8, 0x4, @planes=&(0x7f0000000000)={0xfe, 0x7fffffff, @fd=r2, 0x800}, 0x6, 0x0, r3}) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000040)) 22:18:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407ec, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="6319e6ae3152883e30b8129f75395edf432201ff03e0a2ed13e7c8144783fa41a76acb6add53011f26a5c785708cdac3e52fc9bb12596812b8ff180cb9a7be802ce40c3cc21e133bdbc6", 0x4a}, {}, {&(0x7f0000000280)="6b22a42fa974b35e454b221132c239a03f655e6e1eac58c672e9fde7f78cb7e4391edefb27050827f28d88811aa7dd32402afbc9f54b9f50becfe14d56d701953c0f855ded98745e106942bf2451fea66519f7f29f8a63446482d8531b6b13a7d1f186c8085b3f6f994b0a64992abefa1916ffb71b3ea403658d164308b3ca2720c60e2ef00275467b00b787b9bc82f76ef065403ddad00a0f25bf4e177b117115004478314a25be2ddc61e8c8217b7f337b4850ef251c03eaca5861f0f3100d1758dde4b28eca00"/209, 0xd1}, {&(0x7f0000000800)="8d264b830109b68a8e72966d06c7d6f69c341920b2b844bd4dcadabd3a93dbdd051254dbadfa81f1cd000021172986d779526c8d9fcad2a5cac8bee19369a9", 0x3f}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xda6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x200400200) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6f86353b93fb2fdc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x41000}, 0xc084) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 22:18:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a149338c62b7f63fc000000110001000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20044804}, 0x0) 22:18:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)=0x50d060000) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000001040)=0x10, 0x800) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0x100010, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x8, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0x853aa63c1a5e70fa, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000240)="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", 0xdc1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2a000, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000140)=[0xff, 0x5]) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 22:18:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) sysfs$1(0x1, &(0x7f0000000100)='/dev/btrfs-control\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x185080, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080), 0x4) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x5000, 0x11000}) 22:18:53 executing program 3: syz_emit_ethernet(0xc9, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000400)={"f49c58eefbb3f52741acc515893cf0b90dd011a8aca72f8111c2ca3d770542d0c7a8053ccb4f3ed94493e1458db2189cfa0e0cfd4f1deed7cf81624e3c71a5043c1ecd01a8e6de10080ff78390a7570159b6932cc065ebb7dfd22ed70c555bb94a664aa225730958c38a4b02a279f36553731c5dfb89b2b73d8ee529d6568d16bb28173d9e31bf7ab6a8e70ffb7df54a22960181e829e0109885ac90a6e9fc68fd768092264b4fdf6d086734994ecbccff7f79c92dcfacad9e1dccf4a4f4ba822d8236f46b9a96a2c2f1e732d6f75c4b0fb1999d6cfa1fc55541a4a87de982a4cad687bad612342e29dbc403036e1cd64adb8adf2b0b495d64ec450bc8e12601d0732e46662e5f32580467767742fe7a38cc8b92e8be1463aec0a0e4b2627f10fbfa6cc393c08470556ef5002609349da170c19746c34ab05fcc386f104fe23ba98dc7dcde116acb256370c17dcf392b1d755a716b21ba6660d14828b4c1d78be37ffa711451df677707ef08c9e9b6e095665b05c01320fdd6009b73d9183a78ec397fb922a8fab8b2237a3b2f54a950f795ef502250ca21306d16db0a006c037a0c4dc8a71ffc4d3d74a6d2e2249aba74180d02668207d60147b2054106d3c63c041def9a6d2edf3da666eb8f262537aad49b443db81278ec2e7cfaa98821f9b9afae26e598c471d0aee7be4d78fb60cc776f00e78123ba7103c00739b0e3109033bb560a219790268237d28c53c95ae78bea2545be21416b1a66b5d70dc3f469485ad3f908fddfe06687d6518612b58fb626f5a45f576fe5a2501a840cb2299546ce82a8e93ca166f0f7f2b8d83128d820e80e49e4b734adf48530e5340b2ec8756356246148fb1226e6d165a47ae55cf427a71944d3f1294144660e0cb97e889aa22755feed6590b8462925f1b43487f836cfd6117fca3a1572b7add558e66fc49797360061d23028f0a7826102c6b90d380e2e93d6db1f6c4bb3273edde421beba327670dacb604d4a557e346b2639586219794d256c6e23d03d411c3ce15fc2113975fc32c920d43d78779ed3448fbb31974fc5a95df67d3e8da849e1f9d74d09964c366090c2d9375a56047de28f09fce826b7ce35aef376dbc646d5f7dd1e7f55c0db60e432524d3dac3359d3a603e5c7ce19ce5220850f04bfd32adc8c1771fc07d88e804aaaa55489a1e3fd042025f98ef246a08dacfcbfd4ded9019c06664f3ca8161039146bfc73e4af43fb54084c1539c4f7bbb30a9834e5b476e0c8b8bb679db528601e426a6f42a95bee4932e8ea9fae4d31c9275679082c5dc24ed515e041dca52dabd7ef87e701755bc93503b8f166c1a37951a5695aede545b47f4d5f0efb4ee20f74159cde1e734a7cc47a46976db1ccfcc0236db9ad585fb91284c17406d88fe85fff91eb6d34774e123389401e633637af4779e4a14d"}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40001, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x8007, 0x0, 0x2, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) 22:18:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r5, 0x1, 0x0, 0x0, {0x8, 0x60}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x198, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7a5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x608d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x14}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdc67}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6ed}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf0, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb44}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2fd}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6d55}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffc04}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0xf0}}, 0x54) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r10 = semget$private(0x0, 0x2, 0x605) semop(r10, &(0x7f0000000240)=[{0x2, 0x82dc, 0x800}, {0x1, 0x200}, {0x0, 0x1f, 0x1000}], 0x3) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x4100) ioctl$USBDEVFS_RELEASEINTERFACE(r12, 0x80045510, &(0x7f0000000080)=0x9) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="76e76413f0b3577917fa234f4209e847127a817f8f1404277190c5ed4b8dd569b26d664368c00d685b0eacf70960309c509263150e5f4e4ab044e2599750725f0e40b16899cef5925b7e429bc78186b57bf56df9"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) 22:18:53 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x13c, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x2, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}, @acquire_done={0x40106309, 0x3}, @clear_death={0x400c630f, 0x3}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/246, 0xf6, 0x2, 0x18}, @fda={0x66646185, 0x9, 0x0, 0x23}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x48}}}, @dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/88, 0x58, 0x0, 0xc}, @fda={0x66646185, 0x2, 0x0, 0x1f}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x77007a) 22:18:53 executing program 0: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xffec}, 0x6e) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x1, 0x2, 0x7ff, 0x2, 0x4, 0x9, 0x1, 0x2, 0xcb, 0x3, 0x401, 0x2, 0x9, 0xffff0000, 0xaf48, 0x0, 0x594, 0x800, 0x2, 0xfffffff9, 0x4, 0xd6d, 0xdd, 0x4, 0x7f, 0x8, 0x4, 0x100, 0x2, 0x6, 0x800]}) 22:18:53 executing program 3: fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2182, 0x82) r1 = socket(0x1d, 0x2, 0x6) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0x3185, 0x15, r1, 0x0, &(0x7f00000001c0)={0x990afb, 0x10001, [], @p_u16=&(0x7f0000000180)=0x6}}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/179, 0xfe24) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000100)={0xffffbf42, 0x4, 0x4, 0x4, 0x20, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0x1, 0xa8, 0x7, "a40089e8"}, 0x6, 0x4, @offset=0xffff, 0x140d, 0x0, 0xffffffffffffffff}) ioctl$KDDISABIO(r4, 0x4b37) [ 464.775094][T11941] binder: 11938:11941 ioctl c0306201 77007a returned -14 22:18:53 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x18080) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000080)={0x7}) [ 464.843793][T11947] bridge3: port 1(dummy0) entered blocking state [ 464.852959][T11947] bridge3: port 1(dummy0) entered disabled state [ 464.865979][T11947] device dummy0 entered promiscuous mode [ 465.077912][T11944] device dummy0 left promiscuous mode [ 465.084895][T11944] bridge3: port 1(dummy0) entered disabled state [ 465.149955][T11954] can: request_module (can-proto-6) failed. [ 465.271144][T11954] can: request_module (can-proto-6) failed. 22:18:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x5, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 22:18:54 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00000062726964676500000c3b762568519de62116b92672b4885ca2421d89ba5ec10000000a000100aaaaaaaaaafdbe1e3daa0000c419abd60ca17e0695d862f35095e399642860d928ed559616907e5700fe9a4b54d14742ae6b28b68103ef5d40406640f7c4b71a3e18de129108823aa57fb372c40000000032b964cbe2559fa7129f1de094f0e900"/165], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x400c1}], 0x1, 0x0) 22:18:54 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x6, 0x1, &(0x7f0000000040)=0x2}) r1 = socket(0x10, 0x80002, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) mq_notify(r2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=@ipv4_delroute={0x24, 0x19, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff, 0x2, 0xfd}, [@RTA_PRIORITY={0x8, 0x6, 0x1ff}]}, 0x24}}, 0x0) semget$private(0x0, 0x4, 0x420) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x6, 0x0, &(0x7f0000000100), 0x2, &(0x7f0000000340)=[@iv={0x0, 0x117, 0x2, 0x0, "a8c984b9f7a4b0deca34f8de2066477c7fb680b3497ec6d89a4338580ebac886b45328468eabb888b99db577de80b6506091674861e51f1675d3f1b249db6277f90e67c251260faae615c8c58155961841492c61da2ebb1366c026bfc0d9056f56fa2994f633d82273ce2ac55bc3a7839959"}, @iv={0x0, 0x117, 0x2, 0x0, "c28108d751148691521f4af9b6d739cfa302edb8f84087b1b6d68aa5cbd1512986ae4521894992c09d2d2009f742124d7d98a22ff1f47b129c8b25097509c65bb39f7d87a9c50ea6c11bca976b88386f092091d4fab1406888c6664987813daf3683a00e7c0f7050f3a006b71c9fb0182449044532eb886628c165b7a604f99f84803774ef69a2d002cfc10b3d9bd5e99d315b36a3"}, @assoc, @iv={0x0, 0x117, 0x2, 0x0, "dc976e1e728b081134d423fa56de23b13219c71f2ca68fec3dab53c6518e73d40ab71e73c07d724575411ff5e5d04194e61b1c22398f7fe4a98ecdc2d85da4cc9c71f8efcb74f286e9d4561602acc395892c2dfe8fbdb0d9580a24a21faefd02d5b6014e568152a84ebe06776d5e3376a0350141d334ee6eece5e7cc69bb49a0a09b60e4ad3c616782564476596b6a47db03acead050647846084ed6f4775547930c337d06a35e804c37f2"}, @op, @op, @op, @iv={0x0, 0x117, 0x2, 0x0, "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"}]}], 0x492492492492297, 0x0) 22:18:54 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffff001) 22:18:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) getrandom(&(0x7f0000000280)=""/68, 0x44, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="78000000b089e128b9000000000000f1ff0000", @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2505000000180001801400020073797a5f74756e0000000000000000004c000380150005007fe887806606000000000000000000000000000008000200000000002500040010c08e6c7944f661d82e0470b3696d94ccc794c8e1abb3ae56df3a0fe716cedae4000000"], 0x78}}, 0x40080) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000003c0)) close(r2) mq_notify(r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4014) [ 465.627694][T11971] input: syz1 as /devices/virtual/input/input11 22:18:55 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x28020400) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000200)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = accept4(r1, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80, 0x800) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) 22:18:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @rand_addr=0x4, 0x0, 0x8, [@broadcast, @broadcast, @multicast1, @broadcast, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, 0x30) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="b359fd5c2e4b3e9081e0e90134c3c69bfbc6e605144acacbe28c98e1e58bf6", @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="6327c995651dd14236b093a0a65e427b116ca9fed972edb574600a1161f285748056a7f4e30762da3bba11b8d6895fa417c7184d05af11f0dc0f285d85dfe66ddbeb4f7493b55d5609b4875c479113b7698a3b664d15e7659ab019bcfc6408eaad90868b52d7a3f3ea2433483ccf9644b6ba27d09e8a7bb3"], @ANYRES16=r4, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) r6 = fsopen(&(0x7f0000000040)='v7\x00', 0x0) splice(r5, 0x0, r6, 0x0, 0xb099, 0x0) 22:18:55 executing program 3: set_mempolicy(0x4003, &(0x7f0000000140)=0xfd, 0x2) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1a9}, 0x8) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000040)='*', 0x1a000}], 0x1}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4) 22:18:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000200)={0x18, 0x1, 0x0, {0xac1d}}, 0x18) mq_notify(r1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x5c}}, 0x800) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x78, [], @p_u32=0x0}}) 22:18:55 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, 0x0, r2, 0x0) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) chown(&(0x7f0000000040)='./file0\x00', r2, r3) 22:18:55 executing program 3: set_mempolicy(0x4003, &(0x7f0000000140)=0xfd, 0x2) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1a9}, 0x8) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000040)='*', 0x1a000}], 0x1}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4) 22:18:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000180)) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)="37aee80afaea3511be1bfa745b633b835133fc9b88d3a2abd5455bd93c3936bf0e4c2a31802944acba82890f32f006e32daabe5bcd0b0d4cfcc3d6770d9832f8043ec4c0accbd23d8173a4174a77bc051e3c716b7859d8ee3aadd4e2b937500f129a6495e93b1935ed5567fec1220b023e0daf1ccb4bda69386da181bd81693ca882735435ce7fa407e6ec631124cdb0b4eab6564d92a915071826d4f0eee1fad850659a88d0bbc3c494e0fa73a0763d2e2fe7b61590ea38d63f840afbb20fb01fa44823c996fbb5938653700091e883492026e9fe714f1e26aa1bbe7f232a3954cb68d7437b6a0dbd5b1e7840c8a80d24b811c899623460f086a8d1b67be67ef89827ff3f44a2ba0ee69732007ab2e701bfa012692c278934d34886a29e28ebb21a6e52db03d6e1a0652505567c148fee3719a3e1650bdd63cfe771425e8f18dd207cf73191eaef87716f5bfc90b84849", 0x151}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454ca, &(0x7f0000000140)) 22:18:55 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 22:18:55 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000180)='./file1\x00'}, 0x10) r0 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000040)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/34) 22:18:55 executing program 3: ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x800, 0x7, 0x4, 0x0, 0x3, {0x0, 0x7530}, {0x1, 0x0, 0xc, 0x0, 0x7f, 0x81, "004c0aef"}, 0x7f, 0x1, @userptr=0x1, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x552826d95e848bac, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) pipe(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)='\b') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='vboxnet0+cpuset-\'[&trustedeth0\xc7M\x00', r4) r5 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)='X', 0x1, r5) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r6, r5}, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f00000009c0)='X', 0x1, r7) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r8, r7}, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8427) memfd_create(&(0x7f0000000f00)='\x03\x11&\xe8\\\x19\xd8\x87o\xb0i\xddi_t-\xfc\xd7\xa8\x9a1{-\xbf!\xd9\xfe\xce\x85\xd6\x9cY\xf4o\xef\x90\xcf\xce\xe7\xfa\xce\xb0\xa02\x19\x93\x1a%CZ\xca\x81\x00\\\x1d\x1c)42\xb2\xdd\xd1\x87|\xe1X\x1aby\xedo\xa2+z\xf6i$\x84s\xd2e\x05\x00\xd1g\xc0\x8c8,TQ\xa8Bz\x96:\xdaq/\xd1\x98\x93\xaf7\x17\xfa\x10\x99\x87\xce\xd5Q\xab;OOPr:i\xd2\xb3-i\x00\xbc\x19M\"\xd5s\x85\xa7Bo|\x95\xd0\xbc\xbc-\x80lS\t-H\x86Y\xe2\xde\xd4K\\\x1dF\x87b\xf2y=\f\x12\x8aw\xfc\x17\xa69/w\xeaH\x80\x90.\xf4\xbf:\x95!RO\x0f\xf3\x02\x01\xa0)\vL/\x81Zo\x0e\v<\xf1_\xd3\xde\x0eB\x01\x8f~\x1f\\@D\xa374z\xaf\xad\xb2=7\xfc\x8b\x1a\x8b\x15\xc0\xfc2\x0eI1Iv\xc9f\x8b\xc5M\xaf\xdf#H\x02\xc6\xa0\x92\x80\x14:\xa9\x82\a\xc6+Z\xea\xa4m\xabL\xb1\x15)\xd4<\xe5\xe4x&\x84\xa3\n\xca\xaey\x87\xf5\xb3<\x8c\xeb\xbe0\xe9\xe7\xbau\x9b\xf5\xcb\xc8\xfb\x97\xcaI\x7f\x85_\xa5\xe0J,\xa0\xef\xe7\xe2\x96\xba\a\xb8\x19\x9d\xd4\xf6\xe7\"\xea7\x06\xa7o\xadB\x05\xdb\x11\xc7\xbcM\xab2\x87\xa8F\x19p\xeb#a;g\x8cyn\xfb3\x95x\xee7\xf7\x02Q$\xfc\x86\xd4\x8cy\x0f\x1b\x1e\xb5\xcf\xd4\xa9\xba\xe4L\xf9\xee\xb3;TP:,\xa8*Z,Du\a\x99\xfb*\x9d\x9a\xed\xd4t\xf4\xad\xf8\x8dj\xfd\xe2\x1e)3>.;\xf8\x16\xed\xdbJ\xd1\x84K\xe6(j\xcb\x93\xbb\xa6]\x82\x85\x0f\xac\xf3\x12}pi\x0f\xe2d\x9e\x0f\\\n\b\x19\x8c!\xc1b\x1c\x15\x89\x1e\x87\xd0\xd6\xef\x05,WI\xce]\xdc\xb3N;:\xd3\xe3\xe3\x02\xc8\xf1\xa6\x92\x06S\x81\xc2\x99\x9eU\xd3\x15R\x1d\a \x0e\x12f\x04\x83?\x96\x18s\x80xw\x99\xcb\x87\x1dj+mp\x18|\xbe;\x12\'y\xc1\x17\xda\x8eb\'\xbel\xe4\xe3\xdaM\a\"|\xe3\xbd|LRk\x01\x1a\x17\x81\xe2\x87k\xe8\xf2\x90\xb4\xe8\xf2\xb3V\x15\xce\xc8NqRJ\x05\xd6tm\xff\b@\xb4\x05\x93\xc7\xcf\xb7M\x13\x96_m0|\x9f\x93\xd6\xe6\xd1\xaa\x1b1\xed\xbfAzI\xb5\xbf\x02\xe59\xb2\xb4\xed\x1a\xab\xe2\x1eS\xd5N0\x9c\x00\xd66fD\xd4\xcbO2v\xa0\xa4\xc8\xf2\\\xee\xa0\xcc\xbf9\xe1\xad\x82\x86\x83\xe7\xac\xaf\xdc\xb5\x04\x80\xe4k\x9dZ\x92i\xa7P\x8b\xe7\x03q.\xff?\xa3\x1e\x97\x9cW\x17ipm>(\x8d\xf8\xf9\xa4\xb4.\x0f\xaeM\x9c\x99\x81\x14\xbf\xbb\xae\xc2:\x1f1\x95%\x96\x86Y\xa8\xab\x85Y)\x85v\x1e\xe9B\xc2IF/9\xa4B\xec\xcc\x9e\xd1\xf8\xeaN\x01\xe0t$SW\xe1\x15\xe5\x1c\xb3,-\x98\xdb\x97\xbc\xf0\xf8[&\x8f\x11\x9fV\x113x\xad\x93\xb8\x87fm\x16\xba\'4\xb9\xaa\x1e\x96p?i\xb4\x98Siym#\x80po\xe9\x87\xde\xb0\x1d\xe3\x01\xe9\xd4\x19\x9b)\xe5ur', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1, 0x8) r10 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x44800, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242}, 0x0, 0xffffffffffffffff, r10, 0x0) unshare(0x60020000) 22:18:55 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x5) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) close(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) write$P9_RWALK(r2, &(0x7f00000000c0)={0x57, 0x6f, 0x1, {0x6, [{0x80, 0x4, 0x7}, {0x6a0a9b39aee01d90, 0x4, 0x4}, {0x0, 0x2, 0x8}, {0x0, 0x4, 0x8}, {0x80, 0x2, 0x2}, {0x80, 0x4, 0x5}]}}, 0x57) 22:18:56 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb000, 0x6, &(0x7f0000008000/0xb000)=nil) remap_file_pages(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 22:18:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, &(0x7f0000000040)="4a1929db7c9530e557fe3c67a7417471571cef3e8c17528eee81e4727cf9bed5fdb6aa60091036", 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="0fb47cc966b800a000000f23d8e1006635c00000200f23f80f204566b9d20b00000f32660f3a173b930f015c41ba4200ec260f01c5660f38336cb0642e660fc77023", 0x42}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40800, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) poll(&(0x7f0000000140)=[{r3, 0x280}, {r4, 0x10021}, {r1, 0x8}, {0xffffffffffffffff, 0x510}], 0x4, 0x1) 22:18:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2594, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x401, 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7ad) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) 22:18:56 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x1, 0x620d99d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x40200, 0x46) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000540)={'mangle\x00'}, &(0x7f00000005c0)=0x54) syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x9273, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, &(0x7f0000000100)=0x8) socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) mq_notify(r6, 0x0) sendto$inet(r6, &(0x7f0000000480)="986efefdd65f10720f9ba2ba0c0dcf16b08544af8dfebad1bdc78d721464ce140e898c341e382cf159cfd00f88a81268f6af68366471630d5b8f46855a909975e1abd589d0d781a3f7cf6b3fe1d9f007b9", 0x51, 0x40, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000003c0)="0d1ec2108491fa5bc76a4b5faf0554720cf8e296e5657194add3dc83e182e916056ffe7a2dfe02e066b2211b65c4fe6985a664f78d354685ca84d7511baf8e3279288ab7dbd8118d0fc62fa51d9104ffa17f008fbb2298ee1568c213283c713d1670f92f743cc61d728f8879cd4a8b8fa2cccd3a1c2ef9b0096beb13bd610f6c81cce68992bf4d4ba02fa7003afc3f3942c55081"}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x9, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r5, 0x80000001, 0x10000, 0x3, 0x4, 0xa2, 0xfb, 0x6, {0x0, @in6={{0xa, 0x4e23, 0x81eb, @mcast2, 0x4}}, 0x1000, 0x1, 0x1, 0x3, 0x400}}, &(0x7f0000000180)=0xb0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 467.322861][T12029] IPVS: ftp: loaded support on port[0] = 21 22:18:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket(0x26, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7ff, &(0x7f0000000040)=""/24) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) tkill(r0, 0x821) wait4(0x0, 0x0, 0x0, 0x0) [ 467.582867][T12051] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 467.862183][T12049] IPVS: ftp: loaded support on port[0] = 21 22:18:57 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x154) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f179516d, 0x0) 22:18:57 executing program 4: set_mempolicy(0x3, &(0x7f0000000140)=0x6, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter6\x00') [ 468.292251][T12061] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 468.394087][T11141] tipc: TX() has been purged, node left! 22:18:57 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000680)="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", 0xc5}, {&(0x7f0000000400)="59a984df256d455542f5de3a9f576b9d81ffaa29017b837953a9e43d8db5659c566db893fa0db8c362cf40973c804270429eeb65968f21a69192fff13a0e5def6330a75857c6ea9b1bf51d4bbaabacc2b5def1b8330e2ddeba8d1f2fcc4f2c46111fda66691d46bd8dc5fb65227beb45b17a33a5e760ef237adef6e5524a6a7522e8928e48b2b543d13445863a499535e8653c76491d0fdaec82b2e12050f307c5ba6220dd3ad8909fa70a9bfd6db3b1", 0xb0}, {&(0x7f00000007c0)="259ed835134cf6d6c543f4bd223821aa6c88391587de03f7b4987fb7f9e17f609284a507f8f418569f88dbd24ec88f22a63cf4eddaf0c292552101bc9e0fba18dd82acb6f2cdc187603601836471eeea39204764bf3b41b2aceb2e19efec80525b41d83d53b058fae8e49f5165015d1b5134e624313efb799a589708bd7a7db5e8edecf93bb4", 0x36}, {&(0x7f0000000580)="9209a44a84d2fa7927769876b94630fa5f043424dc15339997a5de1f1d16c72d0a8f556a80dae3b0d0c3658642744d02f15bce7f4015d1d3fc3a804d626ab51bece8c60d3aa59e5856f3b3052a4f8b246a30b4dd55b30f5bc06077c10707ae0d170649d454d8042f39be1e3c97dd6b5db221eb5db6f6cb47f116b6b23f2cf88618b845406e9b5fd518f567f816707a3433", 0x9f}], 0x4) r4 = dup3(r3, r0, 0x80000) write$9p(r4, &(0x7f0000000180)="d4288683488ee2b5feafeb6836b57287b44d", 0x12) write$binfmt_elf64(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xa) close(r2) r5 = socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) write$P9_RSETATTR(r3, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) mq_notify(r6, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0xe) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r8, 0x0, 0x0) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0xe) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r9, 0x0, 0x0) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0xe) ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r10, 0x0, 0x0) clone3(&(0x7f00000004c0)={0x28180, &(0x7f00000000c0), &(0x7f0000000200)=0x0, &(0x7f0000000300), {0x39}, &(0x7f0000000880)=""/231, 0xe7, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0, r8, r9, 0x0, 0x0, 0x0, r10], 0x9}, 0x50) syz_open_procfs(r11, &(0x7f0000000980)='attr/sockcreate\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_tcp_int(r12, 0x6, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) close(r7) mq_notify(r3, 0x0) r13 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r13) mq_notify(r13, 0x0) splice(r5, 0x0, r2, 0x0, 0x0, 0x6) [ 468.439940][T12068] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 468.504705][T12052] IPVS: ftp: loaded support on port[0] = 21 22:18:57 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) mq_notify(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3ff) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) 22:18:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x4) lsetxattr$security_capability(&(0x7f0000000280)='./bus\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x1, 0x7fff}, {0x0, 0xff}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) 22:18:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001f17565746800000001180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) getsockname$l2tp(r5, &(0x7f0000000340), &(0x7f0000000380)=0x10) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) mq_notify(r7, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024000705000000080000000000000000", @ANYRES64=r6, @ANYRES32], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}]}}]}]}]}}]}, 0x70}}, 0x40810) 22:18:58 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0x7fffffff, 0x101480) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet(0xa, 0x801, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x7d, &(0x7f0000000400)={r2}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1ff, 0x7, 0x3, 0xfff, 0x3ff, 0x3, 0x3ff, 0xd306, r2}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000008c0)={r2, 0x8, 0x20}, &(0x7f0000000900)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={r5, 0x9a}, &(0x7f0000000980)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) mq_notify(r7, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x20, 0x43, 0x200, 0x70bd25, 0x25dfdbff, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) r8 = dup(r6) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r9) mq_notify(r9, 0x0) ioctl$VIDIOC_S_EDID(r9, 0xc0285629, &(0x7f0000000740)={0x0, 0x8, 0x1, [], &(0x7f0000000700)=0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa649a6e6fbd3c08004a00006c00000000002f9078ac141400ac1e000144141103ac14140000000000ffffffff000000000420880b0000000000000800000086dd080088be00000000100000000100000000e0bf9ccfabb49857000000200000000200000000000000000000000800655800000000"], 0x0) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x47c, 0x3f4, 0x320, 0x70bd29, 0x25dfdbfd, {0x5, 0x2, 0x4, [0x1ff, 0x4, 0x3, 0x30, 0x6, 0xbb2, 0x5, 0x9, 0xfffffff9, 0x7a6, 0x1, 0x5, 0x7ff, 0x7, 0x3, 0x40100000, 0x3, 0x9, 0x7ff, 0x8, 0x4, 0x1, 0xfffffc3f, 0x401, 0x0, 0x5, 0x3, 0x4, 0x4, 0x7ff, 0x3, 0x8, 0x400, 0x0, 0xfffffff8, 0x1, 0x3, 0x2, 0x100, 0x75, 0x7, 0x40000, 0x0, 0x3, 0x2, 0x4, 0x3e7, 0x2, 0x3, 0x2, 0x3f, 0xfff, 0xffffff80, 0x6, 0x0, 0x400, 0x81, 0x2, 0x2, 0x5, 0x4, 0x8, 0x5, 0x6], [0x561f, 0x9, 0x6, 0x8, 0x0, 0x1, 0xfffffffa, 0x5, 0x0, 0x80000000, 0x6, 0xffff, 0x81, 0x1, 0xc28, 0x1, 0x4, 0x0, 0x6, 0x3f, 0x4, 0x1, 0x7fffffff, 0x8, 0x1, 0xfffffff9, 0x0, 0x2, 0x0, 0x4, 0x20, 0x0, 0x4, 0x3ff, 0x20, 0x4, 0x40, 0x5, 0x9, 0x2, 0x5, 0x800, 0x7, 0x3, 0x7, 0x6, 0x6, 0x8, 0x6, 0x6, 0x9, 0x1ff, 0x7e0419e6, 0xb37, 0x3, 0x1, 0x80, 0xd, 0x7, 0x8a, 0x0, 0x1, 0xff, 0x319a], [0xfa, 0x1, 0x6f7, 0x6, 0x80, 0x6, 0x2, 0x1, 0x80, 0x1000, 0x2, 0x3f, 0x20, 0x2, 0x5, 0x1f, 0x400, 0x7f, 0x3, 0x8000, 0xffff7fff, 0x8, 0x347, 0x2, 0x6, 0x0, 0xfeb, 0x80000000, 0x5, 0xfffffff8, 0x4, 0x0, 0x8000, 0x0, 0xd743, 0x2, 0x5, 0x1, 0x3, 0xe4e, 0x51, 0x4, 0x896, 0x7, 0x0, 0x1, 0x6, 0x1d, 0x5, 0x5, 0xff, 0x5, 0x1d75, 0x6, 0x7, 0xff, 0xee1a, 0xe505, 0x1000, 0x0, 0x9, 0x9, 0x7fffffff], [0x0, 0x7ff, 0xda, 0x3ff, 0x8, 0x85dc, 0x80, 0x1, 0x3, 0x7fffffff, 0x6, 0x4, 0xcd, 0x7, 0x6, 0x8, 0x2, 0x8000, 0x7, 0x9, 0x3, 0xd56, 0x8, 0x6, 0x7f, 0x3ff, 0x7fffffff, 0x4, 0x4, 0x9, 0x7, 0x81, 0x1, 0xfffffff7, 0x4, 0x4, 0x9, 0xa09, 0x0, 0x20, 0x7fffffff, 0x5, 0xffffffff, 0x1ff, 0x2, 0x3, 0x0, 0x8, 0x5, 0x8, 0x7fff, 0x8a83, 0x80, 0x200, 0xdba, 0x0, 0x8, 0x8, 0x3, 0x8c58, 0x4, 0x2, 0x8, 0xfe], 0x59, [']!eth1/\x00', '[\x00', '#ppp1vmnet0}user$@vmnet0bdevvmnet0.selinuxvmnet1nodev^cgroupmime_type\x00', 'wlan1\x00', 'lo\x00']}, ["", "", "", ""]}, 0x47c}}, 0x4008000) r10 = syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x9, 0x220142) ioctl$SNDRV_TIMER_IOCTL_INFO(r10, 0x80e85411, &(0x7f00000007c0)=""/142) r11 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r11) mq_notify(r11, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 22:18:58 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) listen(r1, 0x7ffc) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) listen(r1, 0x8) close(r2) mq_notify(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x100) bind$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0x8001}}, 0x24) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000003c0)={'\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r5}, &(0x7f0000000140)=0x8) close(r3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe, 0x0, 0x2}, 0xe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={r6, 0x3c, &(0x7f0000000340)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x4e23, 0xa6, @ipv4={[], [], @local}, 0x2}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x68020600) [ 469.222361][T12089] IPVS: ftp: loaded support on port[0] = 21 22:18:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x0, 0x0) uselib(&(0x7f0000000000)='./file0\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 22:18:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}}, 0x20008004) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffff, 0x4e0000) write$P9_RCLUNK(r3, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) 22:18:58 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x41, &(0x7f0000000280)=0x3ff, 0x4) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r4}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r2}, 0xd, &(0x7f00000000c0)={&(0x7f0000000180), 0x10}}, 0x0) 22:18:58 executing program 4: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000240)=0x7fffffff) set_mempolicy(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000400)={0x3, "7f55962f430629b0dd5138729bd9a6fc508a27a4ba24251cd83fcd8f25602457", 0x2, 0x3, 0x5, 0x320000, 0x4, 0x2}) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271d, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x400, 0x4, &(0x7f0000000480)=[0xff, 0x6, 0x9, 0x101], &(0x7f00000004c0)=[0x1ff, 0x20400, 0x3, 0x1ff, 0xa87], &(0x7f0000000500)=[0x1, 0x7, 0x2, 0x1a5d8a0, 0x7, 0x4, 0xfffff5bf], &(0x7f0000000540)=[0x1000, 0xfffffff9, 0x8, 0x5, 0x10001, 0x7ff], 0x0, 0xc68}) r3 = socket(0x10, 0x803, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000280)={0x0, 0x3ff, 0x9, 0x3, 0x6, "974cf4800ea577c9ccaf19c862e4569cdc2abc", 0x7, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) epoll_create1(0x80000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10000004) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000003700)={0x0, @loopback, @multicast1}, &(0x7f0000003740)=0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 22:18:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x8998afd0b7e4cf0, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 22:18:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0xa0000010}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x5, 0x11, 0x0, 0x0, @binary='k'}]}, 0x1c}, 0x1, 0x60}, 0x0) [ 470.021125][T12112] device geneve2 entered promiscuous mode 22:18:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6, 0x0, 0x20}]}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 22:18:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x341900) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) 22:18:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f070001241a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b0001006208001c00050000000500260001000000050019007e73000005022b00020000058dc84200000000000c008f00030000000000000008000a00b4f118eb25d9", @ANYRES32=0x0, @ANYBLOB="6b4062de49995ec6e70a03102626088ddf0795ef52126fdf16e3b988755c811321eca62851b299b9626f75d981809d9cd946001dc9458992ac3b903af52938dff87cd217b3b7aa135af634457e23662666ad14c40a92cc06ce385f72a7dda2c0180199a369493707c844"], 0x70}}, 0x0) socket(0x6000000000010, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x7c3801, 0x0) 22:18:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x116000}) socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="3edb69d3672e0f166500baf80c66b89ced8e8a66efbafc0ced362e660f2b526e0f001cba4200ec0f01c4660f5a2f0f009800000f2081"}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x48c0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:00 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet(0xa, 0x801, 0x0) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x7d, &(0x7f0000000400)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1ff, 0x7, 0x3, 0xfff, 0x3ff, 0x3, 0x3ff, 0xd306, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r4, 0x99, "7dd32ffa41ede1ddafea78a4bf084454ed1b41682d9c1e2d0d38a2b8cbb097927ce8bf4a7c708fedf731eab2b0e229843ddd3cc7c4354ed7bfa9976251efe66882a541cf71cb6c2944280ad173c1e18fffc10a817318b38173f9fec05ef76bae6278e6b84222e7816c271e0c7e4b965dd9d47347dd6c8efeff7d7d30d32262fd855803b5fa41df5e6437bd441caf82d3cb97a81e19eb2c26a6"}, &(0x7f00000001c0)=0xa1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r7, 0x9}, 0x8) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340100001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x134}}, 0x10) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x19630300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:19:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="721c7ddc", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000028000800000000000000000000000000a61d350f7c0b5299e14612d1bfc825e267cab522595252b42712955c6f7081410b06f736c6aa73c13bcd157368c0a83f12a0656543c245402d82b53a26f1b70af0a2", @ANYRES32=0x0, @ANYBLOB="07000000000000fffffeff00"], 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x408200) recvfrom$inet(r1, &(0x7f0000000300)=""/219, 0xdb, 0x0, 0x0, 0x0) [ 471.188258][T12152] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 471.197583][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:19:00 executing program 1: mmap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x132) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x40, 0x2, 0xf, 0x7ff, 0x9}) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000000c0)) 22:19:00 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x6, 0x7, 0x4, 0x20, 0x3ff, {0x77359400}, {0x1, 0x0, 0x20, 0x3, 0x2, 0x1, "ed6e4726"}, 0x80, 0x3, @userptr=0x7, 0x9, 0x0, r3}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 471.471032][T12159] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 472.123580][T11141] tipc: TX() has been purged, node left! [ 472.343585][T11141] tipc: TX() has been purged, node left! 22:19:02 executing program 3: 22:19:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod(&(0x7f0000000000)='./bus\x00', 0x8000, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./bus\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x1, 0x7fff}, {0x0, 0xff}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) 22:19:02 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) write(r1, &(0x7f0000000140)="b6", 0x141) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet(0xa, 0x801, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x7d, &(0x7f0000000400)={r5}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1ff, 0x7, 0x3, 0xfff, 0x3ff, 0x3, 0x3ff, 0xd306, r5}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={r5, 0x2, 0x3, 0x9}, 0x10) r8 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = accept4(r0, &(0x7f00000001c0)=@xdp, &(0x7f00000000c0)=0x80, 0x80000) dup2(r8, r9) r10 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r11 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) close(r11) mq_notify(r10, 0x0) r12 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r12) mq_notify(r12, 0x0) splice(r10, &(0x7f0000000000)=0xcf60, r12, &(0x7f0000000040)=0x1000, 0xffffffffffffffe1, 0x5) readv(r1, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0xffbd}], 0x1) ioctl$NBD_DISCONNECT(r0, 0xab08) 22:19:02 executing program 1: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x0) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @dev}, &(0x7f0000000140)=0x80) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x1) 22:19:02 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000480)="a71c1064420a6f31dcd6ad0bf5c449d1ef94eeaf14d4cc4bc9591c697aa422c26171caa5a152147ea2f1571667549be37b8c4311392252e5efccd46c72bea07a62f1287698e006f51963a32fcbc187ab444a8321098acae681e883f98738b01747802b93084a16edd95ae8c767038179c999d460", 0x74}, {&(0x7f0000000500)="9bb14269ca91d3ee78bac03ad67aa6e626f37110e2cc8dabe67c61c0bd393adab3ee807ad2b8ca8d15b07d60125e41cd8ad7a03970b43b607d08faad39c7256123155b3c9fdc3d1e911e7420652990b4d4290f2da29cb8c203ac915c792aa9fb05e0a8c0386f8026ae4477f5bbb498f2074f13816c66291f60465c8092dc7d82efd1367b86dea3a0e00a46777a0e039321412101b7125daf9fe631d49f849d7111b3f8d11177da721fe5b37813b064d516196f050a24eb22df4d2e6f594c99c97cb1a15714f40bf7afd7924986bf0eec74b7e3ce51c655ecfeb5bf178affafb712de4fdeb900"/240, 0xf0}, {&(0x7f0000000600)}, {&(0x7f0000000640)="70648cf877ae6771e8f0cf4c956aa88670077d2ddfec218b2b6f9e13d856198ad2520129c4a380a490fb7e10e2c873870555c45bde63ce85a9f04182e9055bbddee0f6265710eb88d18056ff509ecbf0f7ed65bb10640515da0bb2c954ed250bd660e3e7f831a427494dddd9f94eb5b2eeb76bb01094b43545d18b65e42ada045c051197bbfa483b", 0x88}, {&(0x7f0000000900)="51ed3265cae085dc6ffc246695b391bf22511eaefc059392be27468c990ca200ffc3289ebc12381888306acc7fe407bec5254f2523d3f660ebe46e87cb7be19a91b4f7f16452bdb354c797c1585e69af98fa4cbb9154201ee091588ba80fb7b4da01e680683cbe2edc1f51b6c153ff2d9d03f8f37a08e879949d6626b21c2a820550a1c665aa33c6fdc21d4fb9866692c0a4acd2fd2253830a71f02544de105e6be845c9d82b4db4f3513a3c61aa8515e1b41294350fb19a", 0xb8}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="8f712905e28c936df6277752ea19359ebf59b1e81805cf7270b7ff9070d1320576bdf5321f7ef8f94e1ba421cfac4b0e70404feadb1a435dd43dcd71cdcdef10f9bf0cdfb6e1a49272b58ff7cd598a", 0xffffffffffffff3f}], 0x7}, 0x0) r1 = socket$inet(0x10, 0x80000, 0x1) ioctl$sock_ifreq(r1, 0x8993, &(0x7f0000000180)={'macvlan1\x00', @ifru_data=&(0x7f0000000080)="e0aae4e5d97b4245036751b05b3d9d464b1b5a9227bc34434946540826681138"}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000200)=""/85, &(0x7f00000001c0)=0x55) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 22:19:02 executing program 5: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0xf745, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', r1}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) rt_sigaction(0x6, &(0x7f0000000400)={&(0x7f0000000380)="67440f38cd1533233333f23e2e4785c5430fa468430af246ad0fec2b440f0fa80c0000009e674128ffc4436d5f4d1eb2360f0ec4e145e940ed", 0x40000001, &(0x7f00000003c0)="46da026665660f553746dbe0c4a37d193f042e0f3a0f5f003a410f3807e3c443f9169f2f8dfabab546f6c6c2f30f5add2e653e67f2ad", {[0x6]}}, &(0x7f0000000500)={&(0x7f0000000440)="2e3e65460a77e7c4e2c1b7d40f82bf000000430f990fc461f951d9d9fb6466470f38061cf529000000c4a20d455f66f30f1efb450f1bc3", 0x0, &(0x7f0000000480)="c4a17a53b900000100f30f1efadaa21c000000c4421d921ca7400f1aa33f000000400f0db900800000c4015569068f8878a39464827900006ec4a3fd0ceecff20f5ac0"}, 0x8, &(0x7f0000000540)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000005c0)) pipe(&(0x7f0000000600)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x141000, 0x0) mq_timedreceive(r4, &(0x7f0000000680)=""/163, 0xa3, 0x7f, &(0x7f0000000740)={0x0, 0x989680}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/btrfs-control\x00', 0xd0000, 0x0) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f00000007c0)={0x0, 0x200}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000800)="b0613e6dd822a357974964065a468d1de9aa5b25c3e0fb868d57cbc74f4ac75fe692cc5f7318b8895310541a02532357c25e028e78d74561c6fa9e0d9c6f0c00eb7b0b", 0x43) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000880), &(0x7f00000008c0)=0x40) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vcsu\x00', 0x84000, 0x0) openat$cgroup_type(r7, &(0x7f0000000940)='cgroup.type\x00', 0x2, 0x0) write$midi(r4, &(0x7f0000000980)="cdea7bc6c4f14f852c572558b1656b261959455525f5c8bc77c7a4c014e20a087f210558450d234e20f204df699d4e96464ac4ad3edca0b19bf4f69f2b7af42bf473989410da6ef5328cf70ef807d5e60b2c0db73787ea066efb8e25ad2d8bf56e69d01d5a05a732905162dee76a6fa8d609aa52f6556bbfcc6baaaa795f5d09d92a3b514376bcd2005f25673c1c012f23733280b40afe133746c03779e15bf6f29732ff1ce099f2fa460c99c576cf8d414a0433d4d46f1f7b84abc35204cf3ff386d5e899e354cb87b0973c5ae9d801a61dcab24185221d6c7977503d2c21cb40343e80a96adf255acb7cd48ff8cb825a781d269c49a3", 0xf7) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/ttyS3\x00', 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000b00)={0x6, 0x14, 0x3, 0x0, 0x0, [{{r8}, 0x40}, {{r9}, 0x188d}, {{r3}, 0x81}]}) sysinfo(&(0x7f0000000b80)=""/119) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cachefiles\x00', 0x200080, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r11, 0x8907, &(0x7f0000000c40)) 22:19:02 executing program 1: 22:19:03 executing program 1: 22:19:03 executing program 3: 22:19:03 executing program 4: 22:19:03 executing program 4: 22:19:03 executing program 2: 22:19:03 executing program 0: gettid() ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) add_key$user(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) socket$alg(0x26, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 22:19:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x7e225100, 0x0, 0x0, 0x0, 0x0) 22:19:03 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$setregs(0xf, r0, 0x80, &(0x7f0000000380)="31c9424bcccfbb53c869a9252cc2385e891df4b477ae6c1db138e1402bad4201a97a33fac1526622db3aff0c4e5595b8c417a5a2bead0e403588e2d2f99aeed7d148dc2cbd25b280c75e902162bdad60c75aac359111ec") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x0, 0x10000000000002) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0xbc, 0x1, 0xa0, &(0x7f0000ffd000/0x1000)=nil, 0x6}) r4 = accept4$inet6(r3, &(0x7f0000000300), &(0x7f0000000240)=0xfffffffffffffe69, 0x800) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e20, 0x10001, @empty, 0x9b}, 0x1c) r5 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r5, r2, 0x0, 0x100000700) 22:19:03 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x10) 22:19:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102002ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2, 0x0, 0x146}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 475.505364][T12242] IPVS: ftp: loaded support on port[0] = 21 [ 475.673160][T12242] chnl_net:caif_netlink_parms(): no params data found [ 475.830845][T12242] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.838856][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.848180][T12242] device bridge_slave_0 entered promiscuous mode [ 475.858856][T12242] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.870543][T12242] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.880227][T12242] device bridge_slave_1 entered promiscuous mode [ 475.920150][ T0] NOHZ: local_softirq_pending 08 [ 475.921095][T12242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.940755][T12242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.972093][T12242] team0: Port device team_slave_0 added [ 475.981121][T12242] team0: Port device team_slave_1 added [ 476.005653][T12242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.014144][T12242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.040878][T12242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.054705][T12242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.061730][T12242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.088115][T12242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.149020][T12242] device hsr_slave_0 entered promiscuous mode [ 476.194209][T12242] device hsr_slave_1 entered promiscuous mode [ 476.233540][T12242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.241166][T12242] Cannot create hsr debugfs directory [ 476.378371][T12242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.437796][T12242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.498054][T12242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.562677][T12242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.721349][T12242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.744889][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.754020][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.767985][T12242] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.781707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.791663][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.801042][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.808556][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.819668][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.835836][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.845492][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.855544][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.862889][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.896631][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.909350][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.920515][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.930714][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.941026][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.950709][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.967020][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.984436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.994864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.017580][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.027207][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.041655][T12242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.075035][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.083145][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.102909][T12242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.140461][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.150177][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.196954][T12242] device veth0_vlan entered promiscuous mode [ 477.209619][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.219707][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.244585][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.254574][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.267271][T12242] device veth1_vlan entered promiscuous mode [ 477.313028][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 477.322725][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 477.332924][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.342720][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.366802][T12242] device veth0_macvtap entered promiscuous mode [ 477.386098][T12242] device veth1_macvtap entered promiscuous mode [ 477.418556][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.429709][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.440236][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.452041][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.462287][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.473439][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.484108][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.495018][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.505077][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.516069][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.528923][T12242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.539774][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.549607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.558750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.568749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.596664][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.608034][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.618806][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.630124][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.640597][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.651901][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.662341][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.677207][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.687654][T12242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.698341][T12242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.711635][T12242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.724612][T11869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.737237][T11869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:19:07 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 22:19:07 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 22:19:07 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "dc9ae7", 0x38, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "00a000", 0x0, 0x11, 0x0, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@fragment]}}}}}}}, 0x0) 22:19:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) pipe(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) 22:19:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "dc9ae7", 0x30, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "00a000", 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}}, 0x0) 22:19:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:19:07 executing program 2: gettid() r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) open(&(0x7f0000000080)='./bus\x00', 0x80000, 0x40) socket$alg(0x26, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 22:19:07 executing program 4: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x3c, 0x2, [@TCA_RSVP_ACT={0x38, 0x6, [@m_csum={0x34, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}}}]}]}}]}, 0x6c}}, 0x0) 22:19:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 22:19:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 22:19:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 22:19:07 executing program 5: syz_emit_ethernet(0x96, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "dc9ae7", 0x60, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "00a000", 0x0, 0x11, 0x0, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@fragment, @routing={0x0, 0x33, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1]}]}}}}}}}, 0x0) 22:19:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) 22:19:08 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0001110409f50084fbffa05d900000ff000000000000394405ff09dfa7ffffff45fdf7ffff00000001047645f6657ba705"]}) 22:19:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000034000504d25a80648c63940d0224fc601000000004000500050082c137153e370900018005000a00d1bd", 0x33fe0}], 0x1}, 0x0) 22:19:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 22:19:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003d80)={0x77359400}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) dup2(r3, r2) dup3(r3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) r5 = socket(0x1e, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000000c0)={0x6c, 0x2, 0x1, 'queue1\x00'}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) 22:19:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0x3c}}, 0x0) 22:19:08 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c0000000001ff050000000000000000000000003c0001002c000100140003000000000000000000000000000000000114000400fe80000000000080ffff0000000000bb0c0002000500010000000000240002000c000200050001000000000014000100080001ab0000000008000200e0000001080007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:19:08 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, 0x0, 0x4000010) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) open(0x0, 0x0, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r6, 0x0, 0x8000fffffffe) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 22:19:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 479.915856][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 22:19:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:19:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x5c}}, 0x0) 22:19:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:09 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = getpid() sendmsg$unix(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}, 0x0) 22:19:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:09 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f20a000000572501000000170100"}) r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x1, 0x0) 22:19:09 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:19:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:19:09 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ttyprintk\x00', 0xc0002, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x0, "7da943d98c8e3859e375e87e1f8a6a1296bbca"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)='\n', 0x300}], 0x1) 22:19:09 executing program 3: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) [ 480.913121][T12373] [U] [ 480.932702][T12369] [U] 22:19:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:10 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 22:19:10 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:19:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{&(0x7f0000001d80)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 22:19:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x8, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "bac49d345a2bef0100000083a35469084970ecd46b3e5e8d0093a7485b724c49e113cc7a7ff9f255ed10fdc552a81cd78e0d38ae5aa00c3e9ab3c582a12e27a3a69bbabd6ab3691500"}, 0xd8) 22:19:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}]}, 0x64}}, 0x0) 22:19:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:11 executing program 2: perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000000)={0xfffffff7, 0x1, 0x0, 'queue0\x00', 0x81}) sendfile(r1, r0, 0x0, 0x20000000000000d8) 22:19:11 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:19:11 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1b00000019001f", 0x7, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000200)="bd", 0x1, 0xfffffffffffffffd) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000013", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 22:19:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'vlan0\x00', @ifru_mtu=0xfff}) 22:19:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000040)) [ 482.157772][T12427] netlink: 41651 bytes leftover after parsing attributes in process `syz-executor.3'. 22:19:11 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:19:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000000340)=""/260, 0x104}], 0x1}}], 0x1, 0x40010020, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) 22:19:11 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000011c0)) 22:19:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/nf_conntrack\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x92) sendfile(r1, r0, 0x0, 0x9) 22:19:11 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:11 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00702224aad2c4c3e6f0e3b30fb4175dd977f7fbc3efe910372542", 0x1b}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000b2f000)={0x0, 0x0, &(0x7f0000030fa0)=[{&(0x7f00000cd000)=""/26, 0x1a}], 0x1}, 0x0) 22:19:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:19:12 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() pipe(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4d09, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 22:19:12 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:12 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f00000011c0)) [ 483.381142][T12482] ptrace attach of "/root/syz-executor.2"[11323] was attempted by "/root/syz-executor.2"[12482] 22:19:12 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) [ 483.440009][T12487] ptrace attach of "/root/syz-executor.2"[11323] was attempted by "/root/syz-executor.2"[12487] 22:19:12 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:12 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) 22:19:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f00000011c0)) 22:19:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102002ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$netlink(0x10, 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x146}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:19:12 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) utimes(0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000001c0)) 22:19:13 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:13 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:13 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 22:19:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x208, 0x0, 0x0, r2}}], 0x20}], 0x1, 0x0) 22:19:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f00000011c0)) 22:19:13 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:13 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:19:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='squashfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:19:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102002ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x146}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:19:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/168, 0xa8}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) socket$netlink(0x10, 0x3, 0x0) 22:19:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f00000011c0)) 22:19:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:19:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440), 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 22:19:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:19:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:16 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:19:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 22:19:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287964ccc727d6ef3834293812e927c05c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5afe8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d42f49d36d4a47f2e898961cb43e438c4e41ae43ea118e0700a601dae4b8b99bffffb1ac006c67767b03b9a99d084df4d5c3ada67e8d5111aeb89e6d4a43c625aa2685b6e4afd8c1cc3eb215ba22f43115dbba9dc7beedb130d9f2be90133a0e3ed34258b8c9370634060105baa664953514605fba394aa64e03fb5da791ecf9c873aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacf9d4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bcaabd6948537faf9fff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a767761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d9d54008694c0f3b626d6afcde5fc5e7b3b3f03454cc8f05b8cb621d09240dc200443e7e708ba45026f226dd5f6aec66374d84c02fc49eb697e3161ca77690f4e4ed90301cc78355ff012097d625dbeb84f2cac23dfdfe2ea5a9e235637b115d8cbfe481c8abce2729c9955e80b69868890f534ac70476d3ad72c2012b7b5a107acde6a6f0ee9402959fadc1e32f602dde7b7351af9d617ab55db923699c404b63660644012c0c3d477b82cd622f7289e6cbfd368c2064288c7e8afb666435278c024fe04574ae6bd56a529bc22d6239ac9088d48666563f7c70be3bf4307d40ba7ee9b9fc5a8dba32d84243482c5f1192a4b7a6c8f65216754af67be54a5ec5754461ad06c7ef7d56e358d334f204ae21c50613cf00dfa75dc3ec9594b9ba3e0663eb661cedd4bb609e7f51308b91f974c7131c7b71f72a77aea9d1813c88dd733d67650a0af436dd201c99ba8445ab0ffb87bd9c0a20b253c808ee4808dcfb3d602e5a8169c45238a2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac141440e0", 0x0, 0x9, 0x0, 0x4000}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 22:19:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 22:19:17 executing program 3: add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x0, 0x0) io_getevents(0x0, 0xfff, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000340), 0x10) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, r4}}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa}) close(r2) 22:19:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac141440e0", 0x0, 0x9, 0x0, 0x4000}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = gettid() waitid(0x0, r1, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r1, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 22:19:17 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 22:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:19:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac141440e0", 0x0, 0x9, 0x0, 0x4000}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 22:19:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x60, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="e3"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac141440e0", 0x0, 0x9, 0x0, 0x4000}, 0x28) gettid() waitid(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 22:19:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac141440e0", 0x0, 0x9, 0x0, 0x4000}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = gettid() waitid(0x0, r1, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 22:19:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 22:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:19:17 executing program 2: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setpgid(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="af9a974cb7e1"}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x0) 22:19:17 executing program 0: 22:19:18 executing program 3: 22:19:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:19:18 executing program 1: 22:19:18 executing program 0: 22:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:19:18 executing program 2: 22:19:18 executing program 1: 22:19:18 executing program 0: 22:19:18 executing program 2: 22:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 22:19:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:19:18 executing program 3: 22:19:18 executing program 1: 22:19:18 executing program 0: 22:19:18 executing program 2: 22:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 22:19:19 executing program 3: 22:19:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:19:19 executing program 1: 22:19:19 executing program 0: 22:19:19 executing program 2: 22:19:19 executing program 3: 22:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 22:19:19 executing program 0: 22:19:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:19 executing program 1: 22:19:19 executing program 2: 22:19:19 executing program 3: 22:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:19:19 executing program 0: 22:19:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:19 executing program 1: 22:19:20 executing program 2: 22:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:19:20 executing program 3: 22:19:20 executing program 0: 22:19:20 executing program 1: 22:19:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:20 executing program 2: 22:19:20 executing program 3: 22:19:20 executing program 0: 22:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:19:20 executing program 1: 22:19:20 executing program 2: 22:19:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:21 executing program 1: 22:19:21 executing program 0: 22:19:21 executing program 3: 22:19:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:21 executing program 2: 22:19:21 executing program 1: 22:19:21 executing program 0: 22:19:21 executing program 3: 22:19:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:21 executing program 2: 22:19:21 executing program 1: 22:19:21 executing program 0: 22:19:21 executing program 3: 22:19:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x5c}}, 0x0) 22:19:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x6c}}, 0x0) 22:19:22 executing program 2: 22:19:22 executing program 1: 22:19:22 executing program 3: 22:19:22 executing program 0: 22:19:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x5c}}, 0x0) 22:19:22 executing program 2: 22:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:22 executing program 1: 22:19:22 executing program 3: 22:19:22 executing program 0: 22:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:22 executing program 2: 22:19:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x5c}}, 0x0) 22:19:22 executing program 1: 22:19:23 executing program 0: 22:19:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000001000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0), 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = getpid() tkill(r4, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x8, 0x3a, 0x0, @rand_addr="e514d84000000500fc000000004800", @mcast2, {[], @echo_request}}}}}, 0x0) unshare(0x0) 22:19:23 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10, 0x453, 0x0, 0x70bd29, 0x0, "", [""]}, 0x10}}, 0x8804) 22:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 22:19:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) 22:19:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x1, 0x6, 0x4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000a40)={0x0, @in={0x2, 0x0, @multicast2}, @generic={0x11, "74b144341736e4845fdf1191b4e6"}, @sco, 0x5, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)='lo\x00'}) 22:19:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = syz_open_pts(r1, 0x1d3442) dup3(r2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 22:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}]}, 0x64}}, 0x0) 22:19:23 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x3}}, 0x20040080) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0), 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) 22:19:23 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 22:19:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}]}, 0x64}}, 0x0) 22:19:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1e}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x8020000) 22:19:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) close(0xffffffffffffffff) open(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000000)) 22:19:24 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0), 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) 22:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}]}, 0x64}}, 0x0) 22:19:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000a40)={0x0, @in={0x2, 0x0, @multicast2}, @generic={0x0, "74b144341736e4845fdf1191b4e6"}, @sco, 0x5, 0x0, 0x0, 0x0, 0x700, &(0x7f0000000380)='lo\x00'}) 22:19:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'vxcan0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) r5 = syz_open_pts(0xffffffffffffffff, 0x1d3442) read(r5, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(r5, r2, 0x0) socket(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000036c0)=ANY=[@ANYBLOB="2cfcf285c0ea800e91a1089716929c5764d20e48600cce1fdc882643233daf000000d44687cc6f259f0859cc073797fa14014905000000003b86823dcfb8e4688883dcbccb435918fefffeca2b3baf0a1343fe92a4efb8fde4b5f81be7cd993521d9317c6e4e395f4cd3fa5c7feebe2cefb3860cc6baab3c5c5396bde031e6d1b4bb0b15dc39ff837f78e913f96c4c4acb38488da63b7ba1cd", @ANYRES32], 0x2}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') 22:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) 22:19:24 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000380)) 22:19:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:24 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401012f7, 0x0) 22:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:25 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') 22:19:25 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x10d, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xe4) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3411ee1bab3f", @ANYRES16=r4, @ANYBLOB="00002abd7000000000006b0000000c00990000", @ANYRES32=r5, @ANYBLOB], 0x5}, 0x1, 0x0, 0x0, 0x8890}, 0x20040080) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0), 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x18f103, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r4, 0x120, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x70}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x76a3c14f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc42}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) 22:19:25 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x8, 0x3a, 0x0, @rand_addr="e514d84000000500fc000000004800", @mcast2, {[], @echo_request}}}}}, 0x0) 22:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:25 executing program 2: socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9000000018001f52b9409b0d1b849ac00200a50a020006050600030043000400030000000000c5ac27a6c5a168d0bf46d323456536000000caaf6c26c2912145497e5ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000005e471f000001000000731ae9e086ceb6cf62bb944cf2f9e0db92ced67ae799e6aba4183b", 0x90, 0x0, 0x0, 0x0) 22:19:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) [ 496.698973][T12960] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 496.708366][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:19:25 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0), 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() tkill(0x0, 0x9) unshare(0x8020000) 22:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xffff0000, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) [ 496.885963][T12968] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 496.895152][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:19:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:26 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x1, 0x6, 0x4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000a40)={0x0, @in={0x2, 0x0, @multicast2}, @generic={0x11, "74b144341736e4845fdf1191b4e6"}, @sco, 0x5, 0x0, 0x0, 0x0, 0x700, &(0x7f0000000380)='lo\x00'}) 22:19:26 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x28200, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="101000005304000427bd7000fbdbdf254c811462e33a76158fefcaae2e16996923190e07cefa78a24de4cf8fb7527b864c69b7f5382a502402f40992863e73c3c6dec3e930dd67da40759857d24b8f2556ee8e2ad1f7ac7a7265d1adf15f9eb2264424b30daa0d0b3b9f98a32c60b9166382fb6777292683654f34db19640fa4311d13f134d65ab5248a582f5ccdef358dc8cfedfb5addf02afea6b7c763cda1b437c0eb7f130609ff9432252afd12186d7ffaabcb2e3d9f3261c19b019e42e1653799096b7f59897625244f69a1458d907f9291216c5e79ebc0ca734a1dcfa9f4d50503582a6c1af808e493d9270610f730dd405816a704815b6d5d7e8ad37e4eaaceef2ac8056e97176c85468faba5d103933b8a9f1654dcb06ade3aa67f2145b02ae7d0c9dbb0671baade038c95af61d21f4719589aa70c0ab1bb104bf88869d4a7a9707dd772243146b124521f97de1c5b18b6c7c8fd39c6c754a6e06559aae1b149db9575c2a9c4c63ee6a678fcbd62ff0529cc6e6d3b8f5ea64c80dda14e26fb5944a0b8fc94a414bd5b935bbe99d9c1ed3111c11cb6c0a71be01fe4f6171ee1bbac6beab7c85dd73096bc7665c958d93c7b0f02d5d93ed676f4a6ef1d032bd033c707ce15f4a75db340ad5e793cc353808dcf2cb35c82d53e8d3d4b6c931d95517ad62017f5253fac5e9c7235ddcb6834e41958e5e80212db6e5ffc72d9235761526724be0854634f7c7401b5ec11c29d332259371645de9f25b0f30e7be3641f79417cab19e596be525e7b7f6ca71fb682c18b949394d0c477a39053437106b61ae073210d75bfa80d10beab612619223a697b49cae95f87a038bd726b00b5d313d40767e5fbc7803cea53b1dbbf43948352ab04b17373f45580109c15cc69ceffa26fbc510b1f15f9c806290a051c338394c5baf19d369bfccf57219c5cc2f1ca98e302914f177a6770443ae4a649b3b359e55c1c9a0bc88f346e9caaee0be6e6891a3d7471e103d7aebc539fff92475ded8a346428827717505190964fb48756e885513db5b2310c7d72d835620b91ab57c74a169bdd06102c3d266d9db6e848ea22587a1b283cd8817769f1d4ce228f8f06571fc9f064eebf5666ec861a2e1c8cacd05c3b9548416a3d838e0d75868bd8bb676ce358e1dc2108705471ab77e0efdb849c7728a9eb7db3888421b15eccc2e5f57d7bd23d33e18e0c55301644eb40d81261376fa5164cde8f76fe3c40732929e3174fd90127bc0c986206a6145e5e0212205c527681ea30726f351382279a497cc602c63061f25070feb2af8cb05a07e9eb374f5bed1c67353df87479b9929625c858a4bd5bcccaef1b96ef2448281b8e21e3d8f16f08312cffaaf335b355f655cdd3182e83b54f0b799b58d6e716e91ed879e6de0b720eea6a583de59917043c11e5d09251f07389f7171eb8fc950f90a7edcc73c28692077e46da32f74abffc9750921de2c89e7b94c107952a5ea5faff7d7c30124c38932a3f06a7fe49400852317a22858cd7d1a1235eef5dabefb08dac90b77d4e57e53bbda6909139d4c387af529608e7ef8dabdb8204c5f180ed49e0cb4fb234967b1e18cd49674577ee5740d795560a5b5972da1db682f0d542c9ae0e2b60a23b784082bd29d5e9f396a7f020ca19113e73e375eb2e639bbc57f186abd440209db19617d5e9f62ba4d2d34abef093ab8ed236f3cb874ec1f97c2090d9e1a8af7ea5ae5e2a7276f32dcd0294d82e7280a547f86879f3d723124760ede912f789de5a1096cedc6badd0dabc0f14e3ad6294aa472d4a077e8419958c28603802962a582f40cad111e1f12c2ab2b65ba830223cf58a2dc0bb1287346e795369cb9f1b3e7b27086582b5920a2381f4948163ddcfe2dec75c8f839a7dbd046386a0f8650d33acb40a4624f5064c6ab2a0e4bb74c483f1a5ee7ab4914edfb0eb2b178051e1617afe1293cb49a0b63945b90e099b82013846ead61315d329ec881800948de967e761a98e3d5742262290ea4d681290eaecf99e18b06e8f0dcf9a0c48cd9ac39495d3b8f1489139d2c4c4deb5cf2df2e2ac5bc029ce3e060a42f0d53c723a04d072333fb177a411cbfa910099b447e1ac547388d179064e29550a5918a2f2147d0ceba08d219fd84a271e4a0447fadd0cc0227f377397bc120c6a02ff1497d2a2bca6039a15aae2ed30e6bb05cd8545ee1f6513fa2d70120f02a42564d95d22e7e8c0e016b268550886a8d71f1baa95d9d4fdf07c6cd46a830a5fff078f4e47281fc4607494c0ac628e97b47614825d245164b19f55b49df318dd752676c3f30a5d249d383ab0289f71cdcef3b6fce6a2690f297039c6481d336a5706479cc6c207e04533161c6805a40f0ea4d7652e0cc5d6be547eeee4eeb7d90e39a44e4e4e907c8bd7ec74f63e6066a3f3385b469e179998a97135db1a9e1377134b4a4b0baff6c206a1bd9646e1d847df97ccaddfed29b62f87ba6ebfda25f1a3d82d8863697d4872c40fad3f4a1f246b5715d689693b4e3c4a78905ff6fb5e6ba1f990f4e1aa19abdc456a06d1fcfdae8de7cec56e43f5c49491ca73c7118f6a837234a41992dc0727fa73a7e73016a50921558a60dc970328fac942f1989f60fe75bb2ba8b0699d4c47917998ed0d619b3a9574722743e58e294cd4c2c79a4ba16cb29dee2376939181de4fa97486a649b3b87d381edfafc06f1ea2f2db996d0ef4770dabcf92df0343e9c911c8ebbbe3177fa589636fc9ce93da6c692ab0070ae498dbc1d01de34a843a4ea157bec9ad68d13ff37ef73f693a53a62a8b7d244519bdc09d292d64f211ec155f582180afce4b84529accd61b75e783cff9d8db6d8033944096b8f387c9e1904fc4725ab66917755d0795f9e1541d7dd95667f2051aaa6b5c212c96cd834a5523d5b12e9894db3d50a2d4e7e9e34fadf7a73870e991b741f9aef56d69a55dc504c7ae44b2651e8918a263560d7623c9b14149b9981e9e62760169b8a30144f0603c9ce65adb817b4d27e8dc35085a9de39bec22f96ddc521b76c1588f71177cbb7ecc67d1e75bd103021da304a491e1f3cfd95f036b9aa13d183592181577a54acafab417a3ce4b0b9b4bffb46ec7f32911cf7b092a3f9f69e9d803897af669041ea0c4896708ea40726f7397e778532c167e348ca1732f6491b631ef92dac574f87e33202bbc26cfc79a662a3b2f207fb75e691c7590536497cde3f2837a8b93de9eaf409c8df96bffeb36e16bb7986a5dfd17a904b7a8f1e8df826ed8937ee37d4aa04d4bb8c105f5cb9ecba89ee9689ae8fc79e4a08b3413a875a5802a31863e86cf3c9670a56aafde7c27d86537eaf66b87723bc8880761142866bbb56ee9d6aca0cf6ea7079ec43db33033613becbfa73edfebd0632566d3c522a00f2b9ae1497909c8334b95103b56ea5ae4de8e4be850da058b7463e009459d774c79120a75e38059f6fb7dd51c5e8ce158693ee92af92ad3cf76fc7439984645e860e137726ab59f9fb2c6adcf672dd54fb9309e6941313c05f70eb60601f5763622c8b2bcc8e7451fab4d444176a00e34cda00e668d28983967f662a69da9140440e86b7242809b1a1ab7d4609b76cdf0e3b543e5a894d9774ec989e236bb1cba58f02827ab7f7a44ab26e82748bdc27ebe0961a18fb90a0b56eb3259beafb8befe418a1b98cac568f22500e9c4ea8d03f92a5e1af450702bb13c22a365450969b5fc5d5121f18ab0268f9c5af67d83388ec451c8b1ba79da0428ca5b0b377b8984109dee40d2bb292006f94ebca8714e07d2d252320bc0092dfa8b7da5fb471fe9a63d8f9bb6f88ea416c73616bbc140fdba5cc30d011fbb6cfce78ebf5fd1d1b8a5dbcf85d4ac4e1d9ee5506ea1a1e3ccfbcd596cd892f1ba2988065ed844520a37fd063a288c0e08f92c590aa687582af1a112bf3481e65cc482d6598c18b37e979bc27e31f7e3440341615a0c70082e51b7e67c6dc03a84048fd7ea166d37f50156086f109dc4b8c139fc7a1d346fe66e6e5db34df3aaa83cdd1a16da9787f3b68895c2bb7531db1d859884f9dfd83db5a0f3380d5b18cc8af2e4dc48651897d8c90e5b90dd6a96b0275984d1fda1d312fa74fa25a932a20e6e1fc8ce10021c0b0ef116fd733bdff9f36827b4d564f11ff999672472465d33af6ff43dd2a3d44659a28fc97c6673ddd807a57e607f0ae011c501d67f8195052bf09cd1712f29d466fd927ca82659313a9abff3c10cbe784d19af71a40f748471aa720eb1cc7dad454762340cde87ca65def0b9bd23e156204ee03fb40071e90272f782f2006b34668493192a7d6432e1e1623ae481f167c294ec51006ee0b83ddaa8a0f4d1e965c4229c1b0c730131d3f605bf652668936b9839ac1595d26ec73bf2f0545637992b3744f96c9ef7ec7d54ba240e6428011d16bd5af4dd283dc4234298fd1fc0a927e274d32875cfa0eb8e5baa3949cedabe72a234082c3320925e14a08b5591fc3aa6f4756954598a35b7dc8a4dce0b7dad9eaa2109ca261153b118df72d4a67c3b91642c8d656b5e1d73598140cccd32604df3fff42da295803e4daee7167b683132b68b86a510325f226d2009fff47a9c18b80c56ac4e248d46d23b7c461d5b668eec6a9ac4166ed32e53e45cb89f50007852233d39d813480ada38d9a6ca1ee5bb04d9ce5817391f192db9c2f0bac7f87485b2d597794bc1a141330c9d27cd374769999f1d0cc508ab7b4983c0ccb6bf31fb2e0dc69c893832cf4a12705d6599a5c1c5ba1e8efec8d2e179497f47d9aceb6bc6dfc9637ac2d7e0d3d88dfbc4c49b47b43d38e0699f1e2fb3a02c717790a350350eac795e78d5a4c8e12e4b25e22d8240f8c0ed6d1d0c7b481072c4005aeef3e71f129136a54c927412408594126f592052e4e8abaad7abf7b7b0894670739fbf445aef5e42f9bbbf9ad7a49740bbddd0698bdecaee050f4a50bb2876dd2c5860be28b37f5228f07e22260b036cb2152c4736a6428db4fba8a06e6516f5ceb35fb0f7f8c5ddc76c258731fff9f38f41ce89b117b11aed883bb7e487dbe4e792835a635e4329bbea9fe8ecc421c58bf12ed82fc9b4e680940240ca1575e6e6b80da814a27e6f7bba2c16016e12fd2266070c9591016828eb8c6df3c67eb37ae576c62c079170c054d47ab4b4ae5d3f04954343fb445b2511c555caf4bd59b1ec48221ef01e4447be23848991359a2cbf5ca810de4c557e950aef49c2b6be1cd998d5cb2fb5a80ffdd09e480bf0379ee75f8617fe0f8b6071a0d83b42a2abd0c94dfd7b22accfed6fa917775ab028e447c73414fadaec9da3f40869b26209e3f0e6fc9dab702803a69aa0e2b7621cd2a1c2b417b3e9362eb33e4c2ea3b9a116d31ef66e48faf4a5946e7c46eaa0a859fb40c41b5515393749acf255636046e68f36fc2c4697ef689c7051334db80e9b7319286a96bd6597dbf49fdd67613a7d9748da275356fab8bb11485d257c04d35052d2bf8275adc35f17e5b6526e8a5045a341e5a8d90c4261c5333712ac3ab853b3cfde6527ab9e7917c5357cac23e2f2d92dbd8fbce59c591d627c972b05c24a8c662fe3f9cabf9142e451405067955bcd23449a167e24c8a77a4dae5b5b7fe193b664caf8888a894650e621b7dba265c628e991c1e66b33492ed4ff063ef2850786dee5c1cafea010d588efea5479195573ae7273b091658422548f95908c23e9a6ea0ac87da44cb60c64e212510fbac0d4464e5836c8a3c67fd2c2b628fa362603de19f2d19f9d4b1e058c5b1447"], 0x1}, 0x1, 0x0, 0x0, 0x8010}, 0x40800) tkill(r0, 0x9) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe4}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de428419aec56d159e564e27d901651e3eb76b6f286edc56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4cb8b24f89f29ceef0a428124dcefb40b6b8ce62228c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b900"/201], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2020004}, 0xc, &(0x7f0000001540)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1c040}, 0x90) r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r9, &(0x7f00000001c0)="da40ddeac1019b1dc3b0c31606e29118ecbf6f8fdad833d889def5129828a3a17c8f8feecfd03f4143ce7bf20aebbd50391b3ca0d85574fcf1a4acc0375b5e1be68464ad59d20caf1a3ed3aa27068d16bee8b4b3b87c3a7ee1eb51546633d6932fe0c12e79ce0909f6da86d46bc92b2683120e0e1603d208e21ff677e16dc318ce43f89131a7adc633a0696363d511608c3db7dc95c409e6547324d5004b626e8c9b", 0xa2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 22:19:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000", @ANYRES32=0x0], 0x3}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32], 0x2}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0), 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = getpid() tkill(r3, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x8, 0x3a, 0x0, @rand_addr="e514d84000000500fc000000004800", @mcast2, {[], @echo_request}}}}}, 0x0) unshare(0x8020000) 22:19:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:26 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 22:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:26 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') 22:19:26 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 22:19:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r0, 0x0, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x110) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x200, 0x0) semget(0x2, 0x0, 0x2c0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 22:19:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:26 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x28200, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x8010}, 0x40800) tkill(r0, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x40800, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0xa, 0x4, 0x0, 0x400}, {0x4, 0x8, 0x0, 0x1f}, {0x0, 0x800, 0xe000, 0xb7, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de428419aec56d159e564e27d901651e3eb76b6f286edc56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4cb8b24f89f29ceef0a428124dcefb40b6b8ce62228c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b900"/201], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de428419aec56d159e564e27d901651e3eb76b6f286edc56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4cb8b24f89f29ceef0a428124dcefb40b6b8ce62228c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b900"/201], 0x38}}, 0x0) wait4(0x0, &(0x7f0000000000), 0x1000000, &(0x7f0000000140)) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000400)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, r4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 22:19:27 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x10d, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20040080) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x18f103, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4008010) 22:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:27 executing program 0: syz_emit_ethernet(0x7d, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "eaa836", 0x47, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be, 0x3, 0x0, [], 'RH\t'}}}}}}}, 0x0) 22:19:27 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 22:19:27 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x8020000) 22:19:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:27 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 22:19:27 executing program 1: unshare(0x40000000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:19:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) 22:19:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) [ 498.878252][T13071] IPVS: ftp: loaded support on port[0] = 21 22:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:19:28 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de428419aec56d159e564e27d901651e3eb76b6f286edc56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4cb8b24f89f29ceef0a428124dcefb40b6b8ce62228c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b900"/201], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, &(0x7f00000001c0)="da40ddeac1019b1dc3b0c31606e29118ecbf6f8fdad833d889def5129828a3a17c8f8feecfd03f4143", 0x29) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 22:19:28 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x2}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32], 0x2}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x8, 0x3a, 0x0, @rand_addr="e514d84000000500fc000000004800", @mcast2, {[], @echo_request}}}}}, 0x0) unshare(0x8020000) 22:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) [ 499.368559][T13071] IPVS: ftp: loaded support on port[0] = 21 22:19:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) 22:19:28 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:19:28 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x2000808a, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 22:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) 22:19:29 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="9a8fdb69a52c804e87c6dba9860211aa082ebeba8763c26c88f3a6dc0ff74c2bd12638a47a887dc9378bff1e6c02e4ead57ceacb8eb4", 0x36, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r0, 0x200) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a40)={0x0, @in={0x2, 0x0, @multicast2}, @generic={0x0, "74b144341736e4845fdf1191b4e6"}, @sco, 0x5}) 22:19:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) 22:19:29 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 22:19:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) openat$hwrng(0xffffffffffffff9c, 0x0, 0x40800, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0xa, 0x4, 0x0, 0x400}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de428419aec56d159e564e27d901651e3eb76b6f286edc56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4cb8b24f89f29ceef0a428124dcefb40b6b8ce62228c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9000000"], 0x3}}, 0x0) wait4(0x0, &(0x7f0000000000), 0x1000000, &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000400)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, r2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 22:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) 22:19:29 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 22:19:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) [ 500.253725][ T530] tipc: TX() has been purged, node left! 22:19:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9000000018001f52b9409b0d1b849ac00200a50a020006050600030043000400030000000000c5ac27a6c5a168d0bf46d323456536000000caaf6c26c2912145497e5ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000005e471f000001000000731ae9e086ceb6cf62bb944cf2f9e0db92ced67ae799e6aba4183b", 0x90, 0x0, 0x0, 0x0) 22:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) 22:19:29 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100686673"], 0x2}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x8, 0x3a, 0x0, @rand_addr="e514d84000000500fc000000004800", @mcast2, {[], @echo_request}}}}}, 0x0) 22:19:29 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x8, 0x3a, 0x0, @rand_addr="e514d84000000500fc000000004800", @mcast2, {[], @echo_request}}}}}, 0x0) [ 500.586876][T13149] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 500.596323][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:19:29 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x10d, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00002abd7000000000006b0000000c00990000", @ANYRES32, @ANYBLOB], 0x5}}, 0x20040080) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x18f103, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 22:19:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x58}}, 0x0) 22:19:29 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) 22:19:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000f00)=0x2a5, 0x4) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001780)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001880)=0xe4) bind(0xffffffffffffffff, &(0x7f00000018c0)=@xdp={0x2c, 0xcefbe847b6e60cb9, r2, 0x15}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @remote, 0x100}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000080)=0x32, 0x4) connect$inet(r3, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000f00), 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000f00)=0x2a5, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x2c, 0x80000, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x4}}, 0x0) 22:19:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() tkill(r2, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x8, 0x3a, 0x0, @rand_addr="e514d84000000500fc000000004800", @mcast2, {[], @echo_request}}}}}, 0x0) 22:19:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) 22:19:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x58}}, 0x0) 22:19:30 executing program 1: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9000000018001f52b9409b0d1b849ac00200a50a020006050600030043000400030000000000c5ac27a6c5a168d0bf46d323456536000000caaf6c26c2912145497e5ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160012000a000000000000005e471f000001000000731ae9e086ceb6cf62bb944cf2f9e0db92ced67ae799e6aba4183b", 0x90, 0x0, 0x0, 0x0) 22:19:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @dev}, @sco, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:19:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 22:19:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x5c}}, 0x0) [ 501.526301][T13190] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 501.535475][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 501.668439][T13198] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 501.678978][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:19:31 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="900e000030003deb0000000000000000000000007c0e0100780e01000a0001007065646974000000640e0280200e0200000000000000000000000010125a98147e8cca8b879800000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079f71c41000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034a40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000301900e50000004000050014000600060001000000000006000200000000001400060006000100000000000600020000000000140006000600010000"], 0xe90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08418330e91000105ab071") sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x58}}, 0x0) 22:19:31 executing program 2: r0 = socket$inet6(0xa, 0x2000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffff97, 0x2000808a, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6(0xa, 0x80000, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) 22:19:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x4c}}, 0x0) 22:19:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x38, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x40}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}}, 0x0) 22:19:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x40}}, 0x0) 22:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="880800002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000020000000a000100727376703600000058080200540805000c00080000000000000000003c000100000000000000000000000000000000000000000009000000000000008320000001000000000000000700000000000000000000000000000004040200000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000404030000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000087666a39000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035db00000000000000000000000000000000faffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/2155], 0x888}}, 0x0) 22:19:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x4c}}, 0x0) 22:19:31 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r1, &(0x7f0000002900)=[{&(0x7f0000001540)="a9", 0x1}], 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="08418330e91000105ab071") connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x90005, 0x0) 22:19:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x8f}}]}}]}, 0x5c}}, 0x0) 22:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007440)=[{0xffffff7f00000000, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)='d', 0x1}, {&(0x7f0000000000)="8d03341f54bd5213b1d478d88452c5edce6b439eb46adce6bb60af76a4f9c25b0cad2753bd81d8a7986bf3c14e4e357638027f1d26962e612fe14e22d829974360830ac95f8d3799a4b0678e5696638d04c55dc593aecb4bb271410d6f65d74407ca1adc51017d5fb711eab3e5efdc2bf3634af02b836486e3e50622472d110519e9c967f46ab83dbd2a1a215d5f71ce7505b1f9d7dfbb35cd47e057ce561333e7b3d59c9212faf5441ae2f047105ea160c01c9df6b6465feac0f1a957", 0xbd}], 0x2}], 0x4924924924925c0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x10, @rand_addr="113e000200136560e400"}, 0x1c) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:19:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x4c}}, 0x0) 22:19:32 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80) 22:19:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) 22:19:32 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @random="9190e3d5744c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @rand_addr="6656769a23dc9c42d7ff4dd2db88b69a", @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:19:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 22:19:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x0, 0x0}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 503.469497][T13271] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 22:19:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08418330e91000105ab071") r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x3d0}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x40}}, 0x0) 22:19:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x2b, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 503.658743][T13275] netlink: 44211 bytes leftover after parsing attributes in process `syz-executor.4'. [ 503.672616][T13275] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. 22:19:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x4c}}, 0x0) 22:19:32 executing program 2: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) utime(0x0, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x1, r0}) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x83) fcntl$lock(r2, 0x7, 0x0) dup(r2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x1, 0xff}, 0xc) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7016fedbdf250014000200fe800000000000000000000000000014000000"], 0x3}}, 0x80) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r5, &(0x7f0000001340)={@void, @val={0x0, 0x84, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @rand_addr="c0b378707ee111850a0788e98dd3d48c", @mcast2}}}}}, 0x5a) fcntl$getflags(0xffffffffffffffff, 0xb) 22:19:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) open(0x0, 0x0, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') lseek(r0, 0x401, 0x3) 22:19:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 22:19:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007440)=[{0xffffff7f00000000, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)='d', 0x1}, {&(0x7f0000000000)="8d03341f54bd5213b1d478d88452c5edce6b439eb46adce6bb60af76a4f9c25b0cad2753bd81d8a7986bf3c14e4e357638027f1d26962e612fe14e22d829974360830ac95f8d3799a4b0678e5696638d04c55dc593aecb4bb271410d6f65d74407ca1adc51017d5fb711eab3e5efdc2bf3634af02b836486e3e50622472d110519e9c967f46ab83dbd2a1a215d5f71ce7505b1f9d7dfbb35cd47e057ce561333e7b3d59c9212faf5441ae2f047105ea160c01c9df6b6465feac0f1a957", 0xbd}], 0x2}], 0x4924924924925c0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:19:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x4c}}, 0x0) [ 504.173618][ T530] tipc: TX() has been purged, node left! 22:19:33 executing program 0: getpid() sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f0000007440)=[{0xffffff7f00000000, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)='d', 0x1}, {&(0x7f0000000000)="8d03341f54bd5213b1d478d88452c5edce6b439eb46adce6bb60af76a4f9c25b0cad2753bd81d8a7986bf3c14e4e357638027f1d26962e612fe14e22d829974360830ac95f8d3799a4b0678e5696638d04c55dc593aecb4bb271410d6f65d74407ca1adc51017d5fb711eab3e5efdc2bf3634af02b836486e3e50622472d110519e9c967f46ab83dbd2a1a215d5f71ce7505b1f9d7dfbb35cd47e057ce561333e7b3d59c9212faf5441ae2f047105ea160c01c9df6b6465feac0f1a957", 0xbd}], 0x2}], 0x4924924924925c0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:19:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x4c}}, 0x0) 22:19:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003980)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@local}}}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x0, 0x0) 22:19:34 executing program 3: perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x107) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)) 22:19:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/88) 22:19:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) 22:19:34 executing program 2: getxattr(0x0, 0x0, &(0x7f0000000240)=""/179, 0xb3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readv(r0, &(0x7f00000001c0), 0x0) write$FUSE_INIT(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:19:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 22:19:34 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000080)={@link_local, @empty, @void, {@ipx={0x8137, {0xffff, 0x1e, 0x22, 0x1, {@broadcast, @broadcast}, {@current, @current}}}}}, 0x0) 22:19:34 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80001a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') write$eventfd(0xffffffffffffffff, &(0x7f00000005c0)=0x8, 0x8) 22:19:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) 22:19:34 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2eb) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800, 0x0, 0x0, 0x7, 0x0, 0x1a400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 22:19:34 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) write$P9_RLCREATE(r0, &(0x7f0000000340)={0x18, 0xf, 0x1, {{0x0, 0x0, 0x7}}}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x1040c) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) 22:19:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x0, 0x0) 22:19:35 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x5, 0x8200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) write$P9_RLCREATE(r0, &(0x7f0000000340)={0x18, 0xf, 0x1, {{0x6}, 0x9}}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x1040c) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)={0x0, 0x100000000}) socket(0xa, 0x0, 0x0) 22:19:35 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:19:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) 22:19:35 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) write$P9_RLCREATE(r0, &(0x7f0000000340)={0x18, 0xf, 0x0, {{0x0, 0x4}}}, 0x18) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) 22:19:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) 22:19:35 executing program 2: getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f0000000240)=""/179, 0xb3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0xd3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x480, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/157, 0x9d}], 0x1) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) 22:19:35 executing program 4: 22:19:36 executing program 0: 22:19:36 executing program 1: 22:19:36 executing program 3: 22:19:36 executing program 4: 22:19:36 executing program 2: 22:19:36 executing program 1: 22:19:36 executing program 0: 22:19:36 executing program 5: 22:19:36 executing program 3: 22:19:36 executing program 4: 22:19:36 executing program 1: 22:19:36 executing program 2: 22:19:36 executing program 3: 22:19:37 executing program 4: 22:19:37 executing program 5: 22:19:37 executing program 0: 22:19:37 executing program 1: 22:19:37 executing program 3: 22:19:37 executing program 2: 22:19:37 executing program 0: 22:19:37 executing program 4: 22:19:37 executing program 5: 22:19:37 executing program 1: 22:19:37 executing program 3: 22:19:37 executing program 0: 22:19:37 executing program 2: 22:19:37 executing program 4: 22:19:37 executing program 5: 22:19:38 executing program 1: 22:19:38 executing program 3: 22:19:38 executing program 0: 22:19:38 executing program 5: 22:19:38 executing program 4: 22:19:38 executing program 1: 22:19:38 executing program 2: 22:19:38 executing program 3: 22:19:38 executing program 0: 22:19:38 executing program 4: 22:19:38 executing program 5: 22:19:38 executing program 1: 22:19:38 executing program 2: 22:19:38 executing program 0: 22:19:38 executing program 3: 22:19:39 executing program 5: 22:19:39 executing program 1: 22:19:39 executing program 4: 22:19:39 executing program 2: 22:19:39 executing program 3: 22:19:39 executing program 0: 22:19:39 executing program 5: 22:19:39 executing program 4: 22:19:39 executing program 1: 22:19:39 executing program 2: 22:19:39 executing program 3: 22:19:39 executing program 0: 22:19:39 executing program 5: 22:19:39 executing program 4: 22:19:39 executing program 2: 22:19:39 executing program 1: 22:19:40 executing program 0: 22:19:40 executing program 3: 22:19:40 executing program 5: 22:19:40 executing program 1: 22:19:40 executing program 4: 22:19:40 executing program 2: 22:19:40 executing program 0: 22:19:40 executing program 3: 22:19:40 executing program 5: 22:19:40 executing program 2: 22:19:40 executing program 4: 22:19:40 executing program 1: 22:19:40 executing program 0: 22:19:40 executing program 3: 22:19:41 executing program 5: 22:19:41 executing program 4: 22:19:41 executing program 1: 22:19:41 executing program 2: 22:19:41 executing program 3: 22:19:41 executing program 0: 22:19:41 executing program 5: 22:19:41 executing program 4: 22:19:41 executing program 1: 22:19:41 executing program 2: 22:19:41 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0xa, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x14, 0x1, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 22:19:41 executing program 0: getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 22:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:41 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 22:19:41 executing program 4: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x2, 0x0, [{0x469}, {0x0, 0x0, 0xfff}]}) 22:19:42 executing program 3: syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x1, 0x3, [{}]}) 22:19:42 executing program 2: 22:19:42 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f00000005c0), 0x8) ftruncate(r0, 0x4000ff9) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) 22:19:42 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x8084) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x10007, @dev={0xfe, 0x80, [], 0x1e}, 0x7fe}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb0, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x200}, 0x44}, 0x48) 22:19:42 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), 0x4) 22:19:42 executing program 2: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x4f) sched_setscheduler(0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 22:19:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in=@remote}, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0x128}}, 0x0) 22:19:42 executing program 0: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000dcd000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r0 = getpgid(0x0) setpgid(r0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 22:19:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:19:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000007300)={0x14}, 0x14}}, 0x0) 22:19:42 executing program 4: socketpair(0x25, 0x1, 0x7, &(0x7f0000000000)) 22:19:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) 22:19:43 executing program 2: open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) 22:19:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 22:19:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@empty, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000380)=0xe4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0)=0x4001, 0x4) openat$vcs(0xffffffffffffff9c, 0x0, 0x18f103, 0x0) 22:19:43 executing program 1: syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0) 22:19:43 executing program 5: bpf$OBJ_GET_PROG(0x17, 0x0, 0x0) 22:19:43 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) open(0x0, 0x10d000, 0x2a) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f00000005c0)=0x8, 0x8) ftruncate(r0, 0x4000ff9) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) 22:19:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x1000000000000a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:19:43 executing program 0: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:19:43 executing program 5: gettid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:19:43 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) [ 514.760896][T13674] binder: BINDER_SET_CONTEXT_MGR already set [ 514.767334][T13674] binder: 13668:13674 ioctl 40046207 0 returned -16 22:19:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0fff8ffe5ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000001d00000095000000000000002b230000575d9c556f2c50c4bca2a2cb5a39bc4a49f4f59e0a362871e348a049a2701bddd2ea4a53cf6b6ba856eaf37074e12934ed06d6762fdb96bee67dc6fbcfff86ab648f2730d192b0119454776e23047326eaa0ece94048c7e3bc36f34cd2606dadaaa4ec02f50ae63f9f760581df62474533b9b72a711efcf3d03f91d63c9c5fe5688daf21cfa654a86f7a8942b18ff680cd8c1e126a000000000000000000000000dd889c330a807e0919ca5a451990e9bdbf0615e6120f7cc084d28f2b11e3ec115acd6760c8ab807db50ba9a50de44aa70000bfab6212c0e427b61b5b21d23f60299aa4d1a2513e9739451b63afa7d6949c63d88ffbe4f96ea411e890cf20c2ab2847d22096b3429600e3b525fb5e229e57cb96d4daca383c6a0e7461905f141a54b98e5827ffe74e2546a4fa01a9d70537cfb672d635baabab00000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb0, 0x10, &(0x7f0000000000), 0x44}, 0x48) 22:19:43 executing program 1: perf_event_open(&(0x7f0000000700)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:19:44 executing program 0: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) 22:19:44 executing program 4: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) setpgid(r0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) 22:19:44 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 22:19:44 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x12000, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22:19:44 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) socket(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0), 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x18f103, 0x0) 22:19:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 22:19:44 executing program 0: futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x0) 22:19:44 executing program 4: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) fcntl$addseals(r0, 0x409, 0x0) 22:19:44 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = gettid() r2 = gettid() kcmp(r2, r1, 0x0, r0, 0xffffffffffffffff) 22:19:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) bind$packet(r0, &(0x7f00000005c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 22:19:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 22:19:44 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f00000005c0), 0x8) io_cancel(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x105002, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) 22:19:45 executing program 4: socket(0x2c, 0x0, 0x0) 22:19:45 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) 22:19:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xff4a}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e000ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa39722490bdd9f2774cffe4bd03c9975ba4b0cc3d7c3788e745965108c630cc26d19369cc660d3ccbf2feaeb4603347ab0c8dd0fd14bd500000000000000", 0xffffffffffffffb6}], 0x1, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00T'], 0x3}}, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301", 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00*'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 22:19:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f0000000040)) 22:19:45 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x12000, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc], 0x10000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:19:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)) 22:19:45 executing program 3: pipe2(&(0x7f00000001c0), 0x0) 22:19:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) sendfile(r0, r1, 0x0, 0x102000004) 22:19:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)) close(0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x18f103, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x120, 0x70bd25, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x70}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x76a3c14f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc42}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) 22:19:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003440)=@newqdisc={0x24}, 0x24}}, 0x0) 22:19:45 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 22:19:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0xc8) 22:19:46 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000003440)={0x0, 0x0, 0xfff}) 22:19:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:19:46 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000380)="e5", 0x1) 22:19:46 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) 22:19:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f00000005c0), 0x8) ftruncate(r0, 0x4000ff9) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) creat(0x0, 0x0) 22:19:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 22:19:46 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1a}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) 22:19:46 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="ca60a187402f87bb1b9acfcdf22cfbe6d28ed4845e4ccc7588b13847eaa8d8ee524f31538ba18fd87aba9654a5e3abc86f3b39d0a083e77b39f7a22a", @ANYRES16=r0, @ANYRES32, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32, @ANYBLOB="140002006970366772653000000000000000000004000180"], 0x6}, 0x1, 0x0, 0x0, 0x20000084}, 0x24028081) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x200fff) 22:19:46 executing program 0: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x12000, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB='0'], 0x1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x0, 0x40000004], 0x10000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 22:19:46 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)) close(0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x18f103, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x70}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x76a3c14f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc42}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) 22:19:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) dup3(r0, r1, 0x0) 22:19:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 22:19:47 executing program 0: shmat(0x0, &(0x7f0000de9000/0x3000)=nil, 0x5000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000de9000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) 22:19:47 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 22:19:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x9}}, 0x24, 0x0) dup3(r0, r1, 0x0) 22:19:47 executing program 2: socket$netlink(0x10, 0x3, 0x0) unshare(0x40040400) 22:19:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) 22:19:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x8084) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb0, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x200}, 0x44}, 0x48) 22:19:47 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) 22:19:47 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x0, 0x0) [ 518.891859][T13875] IPVS: ftp: loaded support on port[0] = 21 22:19:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000380), 0x8) 22:19:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003400088030000080080003000000f27e24000100f44da367a88ee6564f020211082f5cebee8b1bf58c7651bfeb7337341b459b3922140002007767300000fb00"/87], 0x5c}}, 0x0) 22:19:48 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={'nhpoly1305-neon\x00'}}) 22:19:48 executing program 2: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) lseek(0xffffffffffffffff, 0x0, 0x3) lsetxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.evm\x00', 0x0, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @rand_addr, @broadcast}, 0xc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r2 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r2, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x14006081) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) open(0x0, 0x402, 0x8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_procfs(0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) accept$inet(r0, 0x0, 0x0) 22:19:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x1, 0x0, [{0x469}]}) 22:19:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="c0dc750d56852bc8", 0x8}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000b2f000)={0x0, 0x0, &(0x7f0000030fa0)=[{&(0x7f000034df41)=""/191, 0xbf}], 0x1}, 0x0) 22:19:48 executing program 5: dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) [ 519.493639][ T863] tipc: TX() has been purged, node left! 22:19:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x97) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 22:19:48 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) 22:19:49 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x12000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x4f) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000240), 0x2) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) [ 519.969402][T13899] could not allocate digest TFM handle nhpoly1305-neon [ 520.053887][T13899] could not allocate digest TFM handle nhpoly1305-neon 22:19:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x9c) 22:19:49 executing program 3: r0 = syz_open_dev$media(&(0x7f0000002400)='/dev/media#\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 22:19:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 22:19:49 executing program 1: unshare(0x40040400) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:19:49 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/318]}], 0x4924924924924b3, 0x0) [ 520.586139][T13956] IPVS: ftp: loaded support on port[0] = 21 22:19:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 22:19:49 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)='\n', 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, 0x0) sched_setscheduler(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sync() 22:19:49 executing program 0: msgget$private(0x0, 0x0) unshare(0x40040400) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 22:19:49 executing program 4: r0 = memfd_create(&(0x7f0000000040)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00W\x1cX\xf0\xaaL\xb6s\xb8\xc5h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x16\xe4\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0) [ 520.851353][T13956] IPVS: ftp: loaded support on port[0] = 21 [ 520.969165][T13968] IPVS: ftp: loaded support on port[0] = 21 22:19:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000001700)) 22:19:50 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000500)="144c43b1bc11559db79094f34f715f60990e00c8f70207a093816967001eb932191afe59fb9dee0a582bd9bbf4370b5f19d32ea9ef3fb7533e4fed6728b08a1f1f6c0ff89d7ea7aaa2287d415800e349ebebda3c350a3371af3a02ef3b9609b8", 0x60}], 0x1) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 22:19:50 executing program 4: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:19:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_team\x00', 0x10) [ 521.657695][T13968] IPVS: ftp: loaded support on port[0] = 21 22:19:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x3, 0x0, [{0x469}, {0x0, 0x0, 0xfff}, {}]}) 22:19:51 executing program 5: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x4000ff9) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendfile(r0, r1, 0x0, 0x8000fffffffe) 22:19:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 22:19:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 22:19:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0xc8) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:19:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000003400088030000080080003000000f27e24000100f44da367a88ee6564f020211082f5cebee8b1bf58c7651bfeb7337341b459b3922140002007767300000fb00"/87], 0x5c}}, 0x0) 22:19:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 22:19:51 executing program 3: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x12000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x0, 0x40000004], 0x10000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:19:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x4058534c, &(0x7f0000000100)={0x80, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 22:19:51 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000740)) 22:19:51 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:19:52 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)) close(0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0)=0x4001, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x18f103, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x120, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x70}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x76a3c14f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc42}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) [ 523.174329][T14046] input: syz0 as /devices/virtual/input/input13 [ 523.232236][T14046] input: syz0 as /devices/virtual/input/input14 [ 523.284196][ T863] tipc: TX() has been purged, node left! 22:19:52 executing program 2: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x41) openat$vcsu(0xffffffffffffff9c, 0x0, 0x12000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x4f) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc]}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000003c0)={0x4, 0x3, [{}, {0x0, 0x0, 0xfff}, {0x0, 0x0, 0x800}, {0x4, 0x0, 0x8}]}) 22:19:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f00000005c0)=@keyring={'key_or_keyring:'}) [ 523.433601][ T863] tipc: TX() has been purged, node left! 22:19:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:52 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) 22:19:52 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080), 0x4) 22:19:52 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:19:53 executing program 5: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x80000005) 22:19:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xc0\x00kH2\x87\xc0sg`d\x85\xc1}E\xd1\x9a\x9a\x86\x14\xdb3>\x95Z\xfb\xcdw\x177\x02\xb6\xcf\xdf\xd7\xe3\x92@t\x1f;<^\x8e\x82\xed8\xb8\xbf\xa0\x1bt\x94/C\x12u\x84\xce\xdf\xd5\n\x8f\xca\xeep\v|\xben\xac\x93\x00\xb6XR\xc6Ew\xb7\xdb\xe1f\xd5\xc0\xcc/B\xca\xd3F]+5x\x04*!K\xb8\xe6\x18\x06`\x83\x99-\xfcV\xf7\x16,\x02?\x14\x02\xbe]r\xea\x01\xdb+\x11\x8bJT\x9dau\r\xaa|Iy\xe6\x7f\xc7\xca\xf5\xad\xefe\xbd\xdb!\x83\xfeU\xcc?\x8d\x1c\x8cr=W*,\xb2\xa2\xb7\xa6M\x8e\xd3 \xf0\xa6~\x92\v\xbf\x98P\xab\n\xc7\x8c\xc4k\x81\xb3E\x81\xa0\xa6\v\x03\x8d\xab\ta5\x03\xc9\xbe\xbb\v\xa8\x94\xc3\xe3\x1d\'B\xd3\xb9T\x8b\xb1\x9f78\xba\x16I\xb8\x7fS\x04\x00\x00\x00\x00\x00\x00\x00$\xa0\x0f\xdd\x8b\x8d\x91\xf6\x10\x8a\t\xc5J\x9d\xc3v4j\xab\x1b\xdfn\xf0\xeeH\x9c\xb6\xcc~!\xfd\xa1R`,\xca\x19%vu\x84?\x84yX0u \xefF\xe4$\xf3\x04\xf5\x1c+\xa7(\"\xf6~;\v\xa4\xa52\xfbY\xbd\xae\xda\x9f\xf1+D\xc1\xbe\xa4\xc5\xe5\xfc(\x13IT^\xcb@\xb1\x9ds\x96\xb6\xc6\x9a \xec\x12m\xe2\x9bb\xff\xc22Y\xb8\xa2\xdd\x8e\xb2\xb28\'Lz\xc2\xc1', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:19:53 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="92", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000100)='^keyring[wlan0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:19:53 executing program 4: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') 22:19:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000240), 0x4) 22:19:53 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f00000005c0)=0x8, 0x8) ftruncate(r0, 0x4000ff9) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) write$eventfd(0xffffffffffffffff, &(0x7f00000005c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000300)={0x0, 0x7}, 0x8) 22:19:53 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000dcd000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 22:19:53 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f00000005c0), 0x8) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 22:19:53 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) 22:19:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x40080, 0x0, 0x0) 22:19:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 22:19:54 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 22:19:54 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) readahead(0xffffffffffffffff, 0x0, 0x0) 22:19:54 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) 22:19:54 executing program 5: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x148110, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0x0, &(0x7f000096d000/0x1000)=nil) prctl$PR_SVE_SET_VL(0x32, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000dcd000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r2 = getpgid(0x0) sched_setaffinity(r2, 0x31f, &(0x7f0000000500)) setpgid(r2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x400000, 0x0) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000200)=0x1) 22:19:54 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 525.369806][T14143] Dead loop on virtual device ip6_vti0, fix it urgently! 22:19:54 executing program 4: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) [ 525.486253][T14143] Dead loop on virtual device ip6_vti0, fix it urgently! 22:19:54 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x4000ff9) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) 22:19:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCSBRKP(r2, 0x5414, 0x800002) 22:19:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x98, 0x98, 0x130, 0x1e8, 0x0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, '\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r1, 0x0, 0x0, 0x24044001, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$inet(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)="d7356ef8b88d274995e26a9472e60960127dca7b978d9892e7d3019cd9e097bfdb4cdbc95d8bbe34b6e8767fb9169ac84ca4b00011701e2f769113", 0x3b}, {&(0x7f0000000300)="c4c0045efe905253b93a474b3df2fddfec36f27eacd857b8dfb775fc4d2b6bff29163792859c48fd323170a175b1da93c8c352b0d7201cc910a525fc013952383f72652ca9", 0x45}, {&(0x7f0000000b80)="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", 0x5a1}], 0x3}}], 0x1, 0x6041054) 22:19:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f00000005c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 22:19:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)) close(0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x70}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x76a3c14f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc42}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) 22:19:55 executing program 3: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x4f) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000003c0)={0x4, 0x3, [{0x0, 0x0, 0xfff}, {}, {}, {0x0, 0x0, 0xbb}]}) [ 526.166035][T14180] x_tables: duplicate underflow at hook 1 22:19:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) [ 526.312616][T14180] x_tables: duplicate underflow at hook 1 22:19:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/11, 0xb) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:19:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYPTR64], 0x1) 22:19:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x1c8, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'sha256\x00'}, 0x208, 0x0, "35764bade3497d33573b27ae77d9836776b4a7ef0edfacc8537736f6127bab53b50ba481732bdfcaaba2acc752c142400fbad6f049d6748161b55fa00913ac2144"}}]}, 0x1c8}}, 0x0) 22:19:55 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000000)) 22:19:56 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2, &(0x7f00000002c0)) [ 526.941586][T14213] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 527.050495][T14221] x_tables: ip_tables: CT target: only valid in raw table, not 22:19:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x1c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 22:19:56 executing program 5: clock_adjtime(0x0, &(0x7f00000001c0)={0x3f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0xffffffffffffffff}) 22:19:56 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f20a000000572501000000170100"}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x367, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x1, 0x0) 22:19:56 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000000)) 22:19:56 executing program 4: keyctl$set_timeout(0xf, 0x0, 0x0) r0 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000040)=""/11, 0xb) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, @perf_config_ext, 0x100, 0x3, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x10, 0x4000053d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000080)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:19:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x405, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFTYPE={0x4, 0xf}]}, 0x1c}}, 0x0) 22:19:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) lseek(r1, 0x31, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x60c43fbf}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r3 = socket(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}], 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) [ 528.174767][ T863] tipc: TX() has been purged, node left! 22:19:57 executing program 5: [ 528.297060][ T863] tipc: TX() has been purged, node left! 22:20:01 executing program 1: 22:20:01 executing program 2: 22:20:01 executing program 3: 22:20:01 executing program 5: 22:20:01 executing program 0: 22:20:01 executing program 4: 22:20:01 executing program 3: 22:20:01 executing program 5: 22:20:01 executing program 0: 22:20:01 executing program 4: 22:20:01 executing program 2: 22:20:01 executing program 1: 22:20:01 executing program 3: 22:20:01 executing program 5: 22:20:01 executing program 0: 22:20:01 executing program 2: 22:20:01 executing program 4: 22:20:01 executing program 1: 22:20:01 executing program 3: 22:20:02 executing program 5: 22:20:02 executing program 4: 22:20:02 executing program 2: 22:20:02 executing program 0: 22:20:02 executing program 1: add_key(&(0x7f00000001c0)='rxrpc\x00', 0x0, &(0x7f0000000240)="9922c630704299aefd6b943807ec9e20b0c200421c5521103bf53f38cf", 0x1d, 0xfffffffffffffffe) 22:20:02 executing program 5: 22:20:02 executing program 3: 22:20:02 executing program 5: 22:20:02 executing program 2: 22:20:02 executing program 0: 22:20:02 executing program 4: 22:20:02 executing program 1: 22:20:02 executing program 3: 22:20:02 executing program 0: 22:20:02 executing program 2: 22:20:03 executing program 5: 22:20:03 executing program 4: 22:20:03 executing program 0: 22:20:03 executing program 2: 22:20:03 executing program 3: 22:20:03 executing program 1: 22:20:03 executing program 5: 22:20:03 executing program 0: 22:20:03 executing program 2: 22:20:03 executing program 3: 22:20:03 executing program 4: 22:20:03 executing program 1: 22:20:03 executing program 0: 22:20:03 executing program 3: 22:20:03 executing program 2: 22:20:03 executing program 4: 22:20:04 executing program 5: 22:20:04 executing program 1: 22:20:04 executing program 0: 22:20:04 executing program 2: 22:20:04 executing program 4: 22:20:04 executing program 3: 22:20:04 executing program 5: 22:20:04 executing program 0: 22:20:04 executing program 2: 22:20:04 executing program 1: 22:20:04 executing program 4: 22:20:04 executing program 5: 22:20:04 executing program 3: 22:20:04 executing program 0: 22:20:05 executing program 2: 22:20:05 executing program 1: 22:20:05 executing program 4: 22:20:05 executing program 5: 22:20:05 executing program 3: 22:20:05 executing program 0: 22:20:05 executing program 1: 22:20:05 executing program 2: 22:20:05 executing program 3: 22:20:05 executing program 5: 22:20:05 executing program 4: 22:20:05 executing program 0: 22:20:05 executing program 1: 22:20:05 executing program 2: 22:20:05 executing program 4: 22:20:05 executing program 5: 22:20:05 executing program 3: 22:20:06 executing program 0: 22:20:06 executing program 1: 22:20:06 executing program 2: 22:20:06 executing program 4: 22:20:06 executing program 5: 22:20:06 executing program 3: 22:20:06 executing program 0: 22:20:06 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) [ 537.486414][T14447] FAULT_INJECTION: forcing a failure. [ 537.486414][T14447] name failslab, interval 1, probability 0, space 0, times 1 [ 537.500217][T14447] CPU: 0 PID: 14447 Comm: syz-executor.1 Not tainted 5.6.0-rc2-syzkaller #0 [ 537.509205][T14447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.519487][T14447] Call Trace: [ 537.522867][T14447] dump_stack+0x1c9/0x220 [ 537.527306][T14447] should_fail+0x8b7/0x9e0 [ 537.531809][T14447] __should_failslab+0x1f6/0x290 [ 537.537012][T14447] should_failslab+0x29/0x70 [ 537.541755][T14447] kmem_cache_alloc_node+0xfd/0xed0 [ 537.547173][T14447] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 537.553350][T14447] ? __alloc_skb+0x208/0xac0 [ 537.558273][T14447] __alloc_skb+0x208/0xac0 [ 537.563134][T14447] netlink_sendmsg+0x7d3/0x14d0 [ 537.568183][T14447] ? netlink_getsockopt+0x1440/0x1440 [ 537.573838][T14447] ____sys_sendmsg+0x12b6/0x1350 [ 537.578860][T14447] __sys_sendmsg+0x451/0x5f0 [ 537.583560][T14447] ? kmsan_get_metadata+0x11d/0x180 [ 537.588847][T14447] ? kmsan_get_metadata+0x11d/0x180 [ 537.594128][T14447] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 537.600346][T14447] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 537.607306][T14447] ? prepare_exit_to_usermode+0x1ca/0x520 [ 537.613453][T14447] __se_sys_sendmsg+0x97/0xb0 [ 537.618218][T14447] __x64_sys_sendmsg+0x4a/0x70 [ 537.623238][T14447] do_syscall_64+0xb8/0x160 [ 537.628019][T14447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.634750][T14447] RIP: 0033:0x45c449 [ 537.639162][T14447] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 537.659650][T14447] RSP: 002b:00007f81b5139c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.668223][T14447] RAX: ffffffffffffffda RBX: 00007f81b513a6d4 RCX: 000000000045c449 [ 537.676371][T14447] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 22:20:06 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) [ 537.684492][T14447] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 537.692514][T14447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 537.700625][T14447] R13: 000000000000091f R14: 00000000004cb7a5 R15: 0000000000000000 22:20:06 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x240001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000de3000)={{0x0, 0xa}}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x7ffc) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x800, 0x1, @mcast1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, &(0x7f0000000180)=0x100) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) syz_open_procfs(0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, &(0x7f0000000140)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r5 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, r5, 0x0, 0xffffffffffffffff, 0x0) unshare(0x68020600) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:20:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0xc0000) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 'syz0\x00', 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0xe8, 0x453, 0x200, 0x70bd2b, 0x25dfdbff, "b55e685991ec5fc6e9c8d7ef840166c7f5b3ad252e1a89b28ef9037d37796e95b1b8a8684b1db26acfaf3fab3281750068239aa8214a7526c420dc39ea22505188cdbfaf257da7ff2d7a435e8c117fbf342a7055af0febf4efb2c83e6da338ebb5de2df87d268a842792483dc8fceb98527c96b3b0d0ed842bd51d80bae7c7714d9ea3afc157738dc0bf8f36c5cf00b85c8a76ef5e81ef7d788a04413c694255be6f59bac370a8ee496d997cbd589b4db67aec5cd983a4137ce86fe4b2b8962fa218ed2d2403335a9b0dd7a7c25e487742793ccbe66e89ae", ["", "", "", "", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0xfffffffe) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32], @ANYRESDEC], 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000080)=""/141) msgrcv(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000006000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa225022b09e58e0006f5c9ffd00"/218], 0xda, 0x0, 0x0) 22:20:06 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r5, 0x29, 0x36, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r4) 22:20:06 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x40}, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/4096) socket$inet6(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000080)={0x0, 0x83, &(0x7f0000001140)="a29513768feddba62734e4841f8a2172159c31d7e6ea2ad424cc57ac76e1f16979e29a674f42daf20f3f960f01408ae2be3892f0da9f234686d421d0de224becf590cdcbdeb60684db02f47fc574b14a36ce4b1ad2aa84a5b4a0573295f22debbb5c0602d3ffd80270142556c493b6a26ea512de0ba4d85dc32a9de3aa083f4eeb0bad"}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) fcntl$dupfd(r6, 0x0, r5) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000000)) madvise(&(0x7f000037f000/0x3000)=nil, 0x3000, 0x2) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 538.063398][T14464] FAULT_INJECTION: forcing a failure. [ 538.063398][T14464] name failslab, interval 1, probability 0, space 0, times 0 [ 538.077614][T14464] CPU: 1 PID: 14464 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 538.086604][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.097548][T14464] Call Trace: [ 538.100944][T14464] dump_stack+0x1c9/0x220 [ 538.105903][T14464] should_fail+0x8b7/0x9e0 [ 538.110461][T14464] __should_failslab+0x1f6/0x290 [ 538.115533][T14464] should_failslab+0x29/0x70 [ 538.120237][T14464] kmem_cache_alloc_node+0xfd/0xed0 [ 538.125514][T14464] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 538.131643][T14464] ? __alloc_skb+0x208/0xac0 [ 538.136944][T14464] __alloc_skb+0x208/0xac0 [ 538.142334][T14464] netlink_sendmsg+0x7d3/0x14d0 [ 538.147300][T14464] ? netlink_getsockopt+0x1440/0x1440 [ 538.152807][T14464] ____sys_sendmsg+0x12b6/0x1350 [ 538.158179][T14464] __sys_sendmsg+0x451/0x5f0 [ 538.162961][T14464] ? kmsan_get_metadata+0x11d/0x180 [ 538.168612][T14464] ? kmsan_get_metadata+0x11d/0x180 [ 538.174845][T14464] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.180836][T14464] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 538.186984][T14464] ? prepare_exit_to_usermode+0x1ca/0x520 [ 538.193424][T14464] __se_sys_sendmsg+0x97/0xb0 [ 538.198487][T14464] __x64_sys_sendmsg+0x4a/0x70 [ 538.203403][T14464] do_syscall_64+0xb8/0x160 [ 538.208105][T14464] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.214944][T14464] RIP: 0033:0x45c449 [ 538.219108][T14464] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.239009][T14464] RSP: 002b:00007f9ebf279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.247856][T14464] RAX: ffffffffffffffda RBX: 00007f9ebf27a6d4 RCX: 000000000045c449 [ 538.255971][T14464] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 538.264117][T14464] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 538.272259][T14464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 538.280470][T14464] R13: 000000000000091f R14: 00000000004cb7a5 R15: 0000000000000000 22:20:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@delqdisc={0x188, 0x25, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x19, 0x7}, {0xfff3, 0x1}, {0xffff, 0x18}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xdb2eb0d2}, @qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd3, 0x0, 0x8000}}}}, @qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x29, [], 0x6, 0x5, 0x8, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, [], 0x0, 0xc2ea, 0x8, 0x7ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, [], 0x4, 0xbc, 0xb8dc, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf7, [], 0x6, 0x560380cf, 0xc38, 0x9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, [], 0x9, 0xffffff90, 0x282, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, [], 0x2, 0x1ff, 0x5, 0xffc00000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, [], 0x7ff, 0x8, 0x7fff, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, [], 0x20886, 0x9, 0x7fff, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, [], 0x3, 0x6, 0x3, 0xffff7751}}]}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xebe, 0x8, 0x0, 0x19, 0x200, 0x6}}, {0x10, 0x2, [0xfff, 0x81, 0x1f, 0x4, 0x3, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbc}, @TCA_RATE={0x6, 0x5, {0x7, 0xfe}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x188}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', r5}) bind$packet(r2, &(0x7f0000000480)={0x11, 0x1, r7, 0x1, 0x1}, 0x14) bind$rxrpc(r1, &(0x7f0000000740)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71006200000ffffffffffffffffffe7ee000000000000000002000000009054d37ca096f5d3f6716adb19127d093875", 0x6a}], 0x1) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0xa002) [ 538.329389][T14467] IPVS: ftp: loaded support on port[0] = 21 22:20:07 executing program 0: unshare(0x8000400) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x4174, 0x21, 0x1, 0xffffffffffffffff}) r2 = signalfd(r1, &(0x7f0000001080), 0x8) fchown(r2, 0x0, 0x0) 22:20:07 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) 22:20:07 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000140)={0x34, 0xe95, 0x1, 0x100, 0x18, 0x80}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000200)={0xfffffffd, 0x101, 0x80000001}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100034d905c2ed1f0000000000000079fcdce6d57c341ebc00", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32=r3, @ANYBLOB="a393a646ba840f847b53a7c04ce9a87e3e2d88b1122df107e0a7cb8f18c0c0d752339515dc20ff710de0d96082a5b1f3ce4a4d5461d0a1964bee8cbeb1c2e9e5c7ef317910c67f6396cfc4ce9e1d3e0edf8ca02da19d022b360000ca13676e73716d283ee8284f4e252918fffc0888786350bf8418c59062a5d7beb94bad609fa0f5e75a50bd70f494f870"], 0x38}}, 0x0) r4 = accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x800) write$binfmt_elf64(r4, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x6, 0x2, 0x9, 0x100000001, 0x2, 0x3, 0x3, 0x2ba, 0x40, 0x13a, 0x6, 0x401, 0x38, 0x1, 0x0, 0x0, 0xfff9}, [{0x4, 0x10001, 0x7ff, 0x3, 0x3ff, 0x3, 0x2c8ecf60, 0x1}], "f05fd17f0373cae633efd481cdcac59e848dd15659e5664ff58e81f7b88da30a2418a6c2925ea9ff33506c5e38e5eda6e9c469c11cab6d9505cab68a603e84f72fd39ecf1c6d4f231a1cd0792f70441bb8922b88b5bc120b828d96a9a65e67d4b90f5f9d41e0c2fb4ccd14c13b74ccbe2bf2bf88a6c149e5882146a164798209e9c2fef3b687a7ebaeefbc6961ef311f7ec0069052d558c02867c42496b7b7bcdc75f160684c663986090ba951f480bfe8fbb8b278316d2937f96e6370a67c5834ae09b5240ca6b90706ba9a64e33dc4cf84", [[], [], []]}, 0x44a) [ 538.626080][T14480] IPVS: ftp: loaded support on port[0] = 21 22:20:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x1, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xb}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5725}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x401}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4925e55}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x80}}, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x102, 0x0) connect$caif(r2, &(0x7f0000000040)=@rfm={0x25, 0x1400, "98a70e139d6f3ef48d2920357fa3acfa"}, 0x18) [ 538.914516][T14494] FAULT_INJECTION: forcing a failure. [ 538.914516][T14494] name failslab, interval 1, probability 0, space 0, times 0 [ 538.928759][T14494] CPU: 1 PID: 14494 Comm: syz-executor.1 Not tainted 5.6.0-rc2-syzkaller #0 [ 538.937878][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.947995][T14494] Call Trace: [ 538.951399][T14494] dump_stack+0x1c9/0x220 [ 538.956040][T14494] should_fail+0x8b7/0x9e0 [ 538.960712][T14494] __should_failslab+0x1f6/0x290 [ 538.965769][T14494] should_failslab+0x29/0x70 [ 538.970582][T14494] __kmalloc_node_track_caller+0x1c3/0x1200 [ 538.976949][T14494] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 538.982611][T14494] ? netlink_sendmsg+0x7d3/0x14d0 [ 538.987715][T14494] ? netlink_sendmsg+0x7d3/0x14d0 [ 538.992937][T14494] __alloc_skb+0x2fd/0xac0 [ 538.997434][T14494] ? netlink_sendmsg+0x7d3/0x14d0 [ 539.003031][T14494] netlink_sendmsg+0x7d3/0x14d0 [ 539.008578][T14494] ? netlink_getsockopt+0x1440/0x1440 [ 539.014218][T14494] ____sys_sendmsg+0x12b6/0x1350 [ 539.019263][T14494] __sys_sendmsg+0x451/0x5f0 [ 539.024410][T14494] ? kmsan_get_metadata+0x11d/0x180 [ 539.029786][T14494] ? kmsan_get_metadata+0x11d/0x180 [ 539.035092][T14494] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.040989][T14494] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 539.047925][T14494] ? prepare_exit_to_usermode+0x1ca/0x520 [ 539.054000][T14494] __se_sys_sendmsg+0x97/0xb0 [ 539.059229][T14494] __x64_sys_sendmsg+0x4a/0x70 [ 539.064058][T14494] do_syscall_64+0xb8/0x160 [ 539.068664][T14494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.074667][T14494] RIP: 0033:0x45c449 [ 539.078748][T14494] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.098723][T14494] RSP: 002b:00007f81b5139c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.107663][T14494] RAX: ffffffffffffffda RBX: 00007f81b513a6d4 RCX: 000000000045c449 [ 539.115798][T14494] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 539.124206][T14494] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 539.132234][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 539.140617][T14494] R13: 000000000000091f R14: 00000000004cb7a5 R15: 0000000000000001 22:20:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00'}) 22:20:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0x105) 22:20:08 executing program 5: lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0xe88af98f04209aff) clone(0x380, &(0x7f00000013c0)="b891ec0fa668ee5a661a82713d96cff988320b16874a8f6f9b53665e2c21cb30c94958bb942d45f3f52097394023cd01d4bff4fb8bdccdb48d7239ddade98ae85f14cc8c9191c9fb2a7dd62fcc574d985b296cbd0bdd82cf6b7b02918238d213e0910e923cfa97b1fbb172578538379ed6de22e91828ed1232800b730cf1eafb14a1821a4b38e6551a5870f32b9a9def6302ff7bf19d88d5913e611ff1ea8cd3347a466a1fe77c73be093abe6af5110605689b28a2ae8c83f1939f26f6f6b6e60feb", &(0x7f00000000c0), &(0x7f0000001540), &(0x7f0000001580)="b1345b0d2463643a8312e9d5d4434ba97555a7bcee790434c341408b8e086d10bd3a5a35d69300000000000000000000000000ad2451910aa4ac53f8249b6d9eda8625db17ad362d110a71418e5befefa69f491296") perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x600, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000001500)=0x6e) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001380)='/dev/nvram\x00', 0x0, 0x0) getpeername$packet(r3, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x9, 0x2, 0x3b7c}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) openat$capi20(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capi20\x00', 0x84002, 0x0) socket$alg(0x26, 0x5, 0x0) fstatfs(r5, &(0x7f0000000380)=""/4096) 22:20:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x114}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x6) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) getpgrp(0xffffffffffffffff) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0xe) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) mq_notify(r6, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000140)) mq_notify(r5, 0x0) r7 = fcntl$dupfd(r5, 0x406, r2) mq_timedsend(r7, &(0x7f0000000200)="63a874aa74654a1979ba5986296381e044523f85d80cf8e5f2c38a4a2524b80a85f5f3f7a4b20f10a79ae6cb598f6abb80eb29d139258a1b44fb34038837df9171527e067c476a5c8a9d50f3ac5e063e3239f82228363a264342c26738a0794252b0fd30461bcd9ad19900cbfd3e069fa5708a338857e81b7dc90a0b6162239f601a1bdde5efc458e7f832857bd340d3ba6f7e9109b8ad4af8c4f89b2a3de90ad5f36355ad0e3ba8809e613dbc3f1dfadd15df5d722b6b94e53a9d2c4947ceb7b701e80a9d338e03ed44a5c069f1ed3c2477d695215a7fd45bfeb4", 0xdb, 0x3, 0x0) ptrace$cont(0x7, r4, 0x0, 0x0) r8 = syz_open_procfs(r4, &(0x7f00000001c0)='net/icmp\x00') open_by_handle_at(r8, &(0x7f0000000340)={0x92, 0xfde, "1de4ccb1a116a0782cdce55eb73d9dca3917e4f8a968ecf97d78b77ab976d09ee1c0bc789a99f4fbeecd61596e763bd5bb7305852221852cb99eb47c2521489dec9da583a3bcd52036e956630ae4e5277d15166e6d93c3e56f9f843a85e4b8ce6e06b48fc50c9c5a82578c91f307ead0c2f604a2fe2c8b2e89f0cf3f84c5a09eb3e1fac1a8e61199863e"}, 0x400080) ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000000)=0x6a) [ 539.474607][ T530] tipc: TX() has been purged, node left! 22:20:08 executing program 4: unshare(0x20020000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x6, 0x1}, 0x6ca5, 0x80, &(0x7f0000000000)="1a9e160375745e64baedfdfab105137f8075d2fa77fdcbadd45cd9a5c3da4324150d239166e88a94dcd84deafe87090b2b1d23cc0c34e27c78267f4cb8ea9886d06f0bf950035f7987cc1ffd2b7154c35caf5609df35bc6684578f09ccac8703205938650bc6f62f2cd504ae7d10304adbdd4e5e4ec3a0c27c30439fc6af5f6b48a0693d6a650816f6345ef3b2230c7a751fb42a6fca1eecfdf0d441efb131ce665ca66ebed5a4a89a06510e1ff8724090ab749da98ea7aa7b85910f54a1105edc68acdbcc740f8dcceb8eca", 0xcc, 0x247, 0x1ff, 0xa, 0x5, 0x9, &(0x7f0000000100)="7c9dd6def574f3a2a9b654d552c6274cdea4646a9c5e3fbb0e58fe58a73e167a522aa0b1328c2c925b", [{0x6, 0x1000, 0x7}, {0xff, 0x8001, 0xffff4b34}, {0x7, 0x6}, {0x1}, {0x30, 0x2, 0xcf}, {0xffff}, {0x3, 0x9, 0x7}, {0x100, 0xfffffff0, 0x1}, {0xffffff19, 0x3, 0x9}, {0x10000, 0x7f, 0x9}]}) 22:20:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001400)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1f6) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = gettid() r2 = dup(r0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000200)={0x4, "55b0e16a2cf1bedad1708186c897ac46f2ac0ade4965f6e90882435adef17e77", 0x5, 0x80, 0x8, 0x7, 0x1, 0x1, 0x4, 0x1}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xe) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000000)='clear_refs\x00') ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000040)={0x1f, 0xb0, &(0x7f0000000140)="72b4006ff44c76e7ad26cb4a9bb0eb9951fee9e34cc029744e20cb68d9f78b2d29c9b4cf57a41052842e3cb6409ddbed8edeaa11797406a0875ae7cfc9ef97c454fe292bd7f171d0008094e55566e1eaa14192262ca61001721d6b8fb52f3be162cda6e079a0c5eaf809291a691204372bd8d8053895b012983fc3c30753dc7e07b761ff0f5e6ca1968d626cc70555d9371866a59272ceb8a9cea7ad029266020158e2e9bbcbc65407e331be99295fc4"}) 22:20:08 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xa}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 539.803157][T14516] IPVS: ftp: loaded support on port[0] = 21 [ 539.804313][T14523] input: syz0 as /devices/virtual/input/input15 22:20:08 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) close(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) mq_notify(r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=""/37, 0x25, 0xffffffffffffffff}}, 0x10) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='&:\x00', &(0x7f0000000200)="ec003c33e3e3279576682477ba9f3110109e1080ac846875dbe7e4b40416f2ec62522546b77d321ec1a569a3153129f2b7af540f90d8c6918e5038e573dc2f5b3650", 0x42) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002ef351f30e1487b8e5e8b8c851863b22a03020000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800130000000000"], 0x64}}, 0x0) [ 540.014568][T14533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 540.025677][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 540.035884][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:20:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000002fc32fcb00000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a31000000000005000100060000001400078008001240000000000800084000000000"], 0x64}}, 0x0) 22:20:09 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x2, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) dup3(r0, r1, 0x0) unshare(0x2000400) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fc}, &(0x7f0000000200), 0x0) 22:20:09 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) close(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) dup(r1) 22:20:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) [ 540.646227][T14542] IPVS: ftp: loaded support on port[0] = 21 22:20:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:20:09 executing program 5: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000001680)=ANY=[@ANYBLOB="500000001000050774001f00dfdbdf250001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000900010000000a000540100000000000000008000a0009d35b587e27a8a0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9cb85f7297cb072cd56730044a79221485c9b6a83c953a21aa4f20f55716d40a207530362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c425b32265056d7425271b24a7a00c7f44c83d98fd505c6a5bed", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f627927737456b54921f664921e1615264cc762c1897041559d7dc7e2109b0dff9eb9ca92da732cc5b460a46383502d39115895996c76ff3ce0392ed1257af1867305485dc560b67fa9950386e7d44374265b739aa0ef8918e45c58c6bc0a1dcfde97698dfe68efeb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09177280b0443767621957b58026d75a2af7545a1846410a825177157fae4410495e05db71008105c4fad5b19be07"], 0x50}}, 0x0) 22:20:10 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) pipe(0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) memfd_create(&(0x7f0000000f00)='\x03\x11&\xe8\\\x19\xd8\x87o\xb0i\xddi_t-\xfc\xd7\xa8\x9a1{-\xbf!\xd9\xfe\xce\x85\xd6\x9cY\xf4o\xef\x90\xcf\xce\xe7\xfa\xce\xb0\xa02\x19\x93\x1a%CZ\xca\x81\x00\\\x1d\x1c)42\xb2\xdd\xd1\x87|\xe1X\x1aby\xedo\xa2+z\xf6i$\x84s\xd2e\x05\x00\xd1g\xc0\x8c8,TQ\xa8Bz\x96:\xdaq/\xd1\x98\x93\xaf7\x17\xfa\x10\x99\x87\xce\xd5Q\xab;OOPr:i\xd2\xb3-i\x00\xbc\x19M\"\xd5s\x85\xa7Bo|\x95\xd0\xbc\xbc-\x80lS\t-H\x86Y\xe2\xde\xd4K\\\x1dF\x87b\xf2y=\f\x12\x8aw\xfc\x17\xa69/w\xeaH\x80\x90.\xf4\xbf:\x95!RO\x0f\xf3\x02\x01\xa0)\vL/\x81Zo\x0e\v<\xf1_\xd3\xde\x0eB\x01\x8f~\x1f\\@D\xa374z\xaf\xad\xb2=7\xfc\x8b\x1a\x8b\x15\xc0\xfc2\x0eI1Iv\xc9f\x8b\xc5M\xaf\xdf#H\x02\xc6\xa0\x92\x80\x14:\xa9\x82\a\xc6+Z\xea\xa4m\xabL\xb1\x15)\xd4<\xe5\xe4x&\x84\xa3\n\xca\xaey\x87\xf5\xb3<\x8c\xeb\xbe0\xe9\xe7\xbau\x9b\xf5\xcb\xc8\xfb\x97\xcaI\x7f\x85_\xa5\xe0J,\xa0\xef\xe7\xe2\x96\xba\a\xb8\x19\x9d\xd4\xf6\xe7\"\xea7\x06\xa7o\xadB\x05\xdb\x11\xc7\xbcM\xab2\x87\xa8F\x19p\xeb#a;g\x8cyn\xfb3\x95x\xee7\xf7\x02Q$\xfc\x86\xd4\x8cy\x0f\x1b\x1e\xb5\xcf\xd4\xa9\xba\xe4L\xf9\xee\xb3;TP:,\xa8*Z,Du\a\x99\xfb*\x9d\x9a\xed\xd4t\xf4\xad\xf8\x8dj\xfd\xe2\x1e)3>.;\xf8\x16\xed\xdbJ\xd1\x84K\xe6(j\xcb\x93\xbb\xa6]\x82\x85\x0f\xac\xf3\x12}pi\x0f\xe2d\x9e\x0f\\\n\b\x19\x8c!\xc1b\x1c\x15\x89\x1e\x87\xd0\xd6\xef\x05,WI\xce]\xdc\xb3N;:\xd3\xe3\xe3\x02\xc8\xf1\xa6\x92\x06S\x81\xc2\x99\x9eU\xd3\x15R\x1d\a \x0e\x12f\x04\x83?\x96\x18s\x80xw\x99\xcb\x87\x1dj+mp\x18|\xbe;\x12\'y\xc1\x17\xda\x8eb\'\xbel\xe4\xe3\xdaM\a\"|\xe3\xbd|LRk\x01\x1a\x17\x81\xe2\x87k\xe8\xf2\x90\xb4\xe8\xf2\xb3V\x15\xce\xc8NqRJ\x05\xd6tm\xff\b@\xb4\x05\x93\xc7\xcf\xb7M\x13\x96_m0|\x9f\x93\xd6\xe6\xd1\xaa\x1b1\xed\xbfAzI\xb5\xbf\x02\xe59\xb2\xb4\xed\x1a\xab\xe2\x1eS\xd5N0\x9c\x00\xd66fD\xd4\xcbO2v\xa0\xa4\xc8\xf2\\\xee\xa0\xcc\xbf9\xe1\xad\x82\x86\x83\xe7\xac\xaf\xdc\xb5\x04\x80\xe4k\x9dZ\x92i\xa7P\x8b\xe7\x03q.\xff?\xa3\x1e\x97\x9cW\x17ipm>(\x8d\xf8\xf9\xa4\xb4.\x0f\xaeM\x9c\x99\x81\x14\xbf\xbb\xae\xc2:\x1f1\x95%\x96\x86Y\xa8\xab\x85Y)\x85v\x1e\xe9B\xc2IF/9\xa4B\xec\xcc\x9e\xd1\xf8\xeaN\x01\xe0t$SW\xe1\x15\xe5\x1c\xb3,-\x98\xdb\x97\xbc\xf0\xf8[&\x8f\x11\x9fV\x113x\xad\x93\xb8\x87fm\x16\xba\'4\xb9\xaa\x1e\x96p?i\xb4\x98Siym#\x80po\xe9\x87\xde\xb0\x1d\xe3\x01\xe9\xd4\x19\x9b)\xe5ur', 0x0) request_key(0x0, 0x0, &(0x7f00000002c0)='vboxnet0+cpuset-\'[&trustedeth0\xc7M\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000000)) r2 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0), 0x0, r0) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r2, r0}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3}, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8427) memfd_create(&(0x7f0000000f00)='\x03\x11&\xe8\\\x19\xd8\x87o\xb0i\xddi_t-\xfc\xd7\xa8\x9a1{-\xbf!\xd9\xfe\xce\x85\xd6\x9cY\xf4o\xef\x90\xcf\xce\xe7\xfa\xce\xb0\xa02\x19\x93\x1a%CZ\xca\x81\x00\\\x1d\x1c)42\xb2\xdd\xd1\x87|\xe1X\x1aby\xedo\xa2+z\xf6i$\x84s\xd2e\x05\x00\xd1g\xc0\x8c8,TQ\xa8Bz\x96:\xdaq/\xd1\x98\x93\xaf7\x17\xfa\x10\x99\x87\xce\xd5Q\xab;OOPr:i\xd2\xb3-i\x00\xbc\x19M\"\xd5s\x85\xa7Bo|\x95\xd0\xbc\xbc-\x80lS\t-H\x86Y\xe2\xde\xd4K\\\x1dF\x87b\xf2y=\f\x12\x8aw\xfc\x17\xa69/w\xeaH\x80\x90.\xf4\xbf:\x95!RO\x0f\xf3\x02\x01\xa0)\vL/\x81Zo\x0e\v<\xf1_\xd3\xde\x0eB\x01\x8f~\x1f\\@D\xa374z\xaf\xad\xb2=7\xfc\x8b\x1a\x8b\x15\xc0\xfc2\x0eI1Iv\xc9f\x8b\xc5M\xaf\xdf#H\x02\xc6\xa0\x92\x80\x14:\xa9\x82\a\xc6+Z\xea\xa4m\xabL\xb1\x15)\xd4<\xe5\xe4x&\x84\xa3\n\xca\xaey\x87\xf5\xb3<\x8c\xeb\xbe0\xe9\xe7\xbau\x9b\xf5\xcb\xc8\xfb\x97\xcaI\x7f\x85_\xa5\xe0J,\xa0\xef\xe7\xe2\x96\xba\a\xb8\x19\x9d\xd4\xf6\xe7\"\xea7\x06\xa7o\xadB\x05\xdb\x11\xc7\xbcM\xab2\x87\xa8F\x19p\xeb#a;g\x8cyn\xfb3\x95x\xee7\xf7\x02Q$\xfc\x86\xd4\x8cy\x0f\x1b\x1e\xb5\xcf\xd4\xa9\xba\xe4L\xf9\xee\xb3;TP:,\xa8*Z,Du\a\x99\xfb*\x9d\x9a\xed\xd4t\xf4\xad\xf8\x8dj\xfd\xe2\x1e)3>.;\xf8\x16\xed\xdbJ\xd1\x84K\xe6(j\xcb\x93\xbb\xa6]\x82\x85\x0f\xac\xf3\x12}pi\x0f\xe2d\x9e\x0f\\\n\b\x19\x8c!\xc1b\x1c\x15\x89\x1e\x87\xd0\xd6\xef\x05,WI\xce]\xdc\xb3N;:\xd3\xe3\xe3\x02\xc8\xf1\xa6\x92\x06S\x81\xc2\x99\x9eU\xd3\x15R\x1d\a \x0e\x12f\x04\x83?\x96\x18s\x80xw\x99\xcb\x87\x1dj+mp\x18|\xbe;\x12\'y\xc1\x17\xda\x8eb\'\xbel\xe4\xe3\xdaM\a\"|\xe3\xbd|LRk\x01\x1a\x17\x81\xe2\x87k\xe8\xf2\x90\xb4\xe8\xf2\xb3V\x15\xce\xc8NqRJ\x05\xd6tm\xff\b@\xb4\x05\x93\xc7\xcf\xb7M\x13\x96_m0|\x9f\x93\xd6\xe6\xd1\xaa\x1b1\xed\xbfAzI\xb5\xbf\x02\xe59\xb2\xb4\xed\x1a\xab\xe2\x1eS\xd5N0\x9c\x00\xd66fD\xd4\xcbO2v\xa0\xa4\xc8\xf2\\\xee\xa0\xcc\xbf9\xe1\xad\x82\x86\x83\xe7\xac\xaf\xdc\xb5\x04\x80\xe4k\x9dZ\x92i\xa7P\x8b\xe7\x03q.\xff?\xa3\x1e\x97\x9cW\x17ipm>(\x8d\xf8\xf9\xa4\xb4.\x0f\xaeM\x9c\x99\x81\x14\xbf\xbb\xae\xc2:\x1f1\x95%\x96\x86Y\xa8\xab\x85Y)\x85v\x1e\xe9B\xc2IF/9\xa4B\xec\xcc\x9e\xd1\xf8\xeaN\x01\xe0t$SW\xe1\x15\xe5\x1c\xb3,-\x98\xdb\x97\xbc\xf0\xf8[&\x8f\x11\x9fV\x113x\xad\x93\xb8\x87fm\x16\xba\'4\xb9\xaa\x1e\x96p?i\xb4\x98Siym#\x80po\xe9\x87\xde\xb0\x1d\xe3\x01\xe9\xd4\x19\x9b)\xe5ur', 0x1) syz_open_procfs(0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x44800, 0x0) unshare(0x60020000) 22:20:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0xc08, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008050}, 0x45811) close(r1) mq_notify(r1, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xc74}, 0x16, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="95c400010000000000000100fffffffd00000400000000140018000000280a7470f284fba6ce725ede8195683a"], 0x30}}, 0x0) 22:20:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001040)="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", 0xa04}], 0x1) 22:20:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x141340, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000100)=""/248, &(0x7f0000000200)=0xf8) 22:20:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r2, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x117}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c248eb02612af5dea16c450201"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "1a52"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "8015704b16eedd37b2e903c25c203d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x70}, 0x1, 0x0, 0x0, 0x2008800}, 0x81) [ 541.284916][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.376950][T14582] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 541.385509][T14582] device team_slave_0 entered promiscuous mode 22:20:10 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x20, r3, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}]}, 0x20}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40091) r7 = dup(r4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e21, @broadcast}}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:20:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000002c858d368eed80f8530000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000"], 0x64}}, 0x0) [ 541.385586][T14582] device team_slave_1 entered promiscuous mode [ 541.385725][T14582] device macsec1 entered promiscuous mode 22:20:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0xa0000, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x5, 0x4) [ 541.385749][T14582] device team0 entered promiscuous mode [ 541.395702][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.418263][T14582] device team0 left promiscuous mode [ 541.419777][T14582] device team_slave_0 left promiscuous mode [ 541.419821][T14582] device team_slave_1 left promiscuous mode [ 541.642802][T14581] IPVS: ftp: loaded support on port[0] = 21 [ 541.793287][T14592] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:11 executing program 3: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) iopl(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r3, r4, 0x0, 0x7ffff000) mmap(&(0x7f000007b000/0x12000)=nil, 0x12000, 0xb, 0x12, r1, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x7, &(0x7f0000000080)=[{}, {}, {@fixed}, {@none}, {@none}, {}, {}]}) 22:20:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet(0xa, 0x801, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000400)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1ff, 0x7, 0x3, 0xfff, 0x3ff, 0x3, 0x3ff, 0xd306, r3}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x7, 0x6}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xe8}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROBES={0x5, 0x15, 0xc1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) [ 542.345339][T14604] IPVS: ftp: loaded support on port[0] = 21 22:20:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000364007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00009a2ab8bf6cbbae0000000000000400110763e1ad007463696e646578000c0002000600020000000000"], 0x3c}}, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) mq_notify(r7, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x2}}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000400)="c245d9cf37e82c008f05d4ff1812b41d0a60373add20701a5b0248be31ab49c6f7fd96307cd9f5718ac9be4f6a1a57d9b1eb37d294be24e84d24ba33bf856e36d9d9fdaea7165c179a45ea995bf3f0e5cd2184ec00098aefb30f4fb736ba3e1a14d55f4f7fc4213577f90462ca4b6b466ebcfc61cc1e1a5a1adb7541bb9d367174cd121d74e3a6fcaab71345866d54be43925562c3b8d4f00c481dd008b976cb9691b8f80832b88852bca77b563a0f38adf3b17f7b330c50a23bed12446e107789e6fb884e60b09d8f743a7ae8a0ea693b4efbde506b9ffc3e579ff61f454668", 0xe0}, {&(0x7f0000000580)="99265ccf870c62adcd5fdff7b8bf714a29bab14f3faa146ebc00e121c1fb8f46e07c6c2c3cadb92fbb1c7a560e7e591413fcbadbf01a08dc4b7949e4ae62664400948733cadb23a724b50bd111c211d598f2058f1797b1776db636667d115b270643e46148530e998d69fad63632d64de87e85fc0f7c6e4aead0b9ad9f2e17a06541c082e802e17d881b4f1ed41873b780ed4cf40aa8258e129314b6f382caf095d9cf84954e48c1801b7977520db88a104bcf5bd51597367664d012584f1f8f6933b2ae5a777cf9e3ff2750763244fcb125f98d16cba8f681fb945cd84c237153dc82b290ce92f0b1f5ac3e87bb81df0b0a63721002fb", 0xf7}, {&(0x7f0000000300)="fb59374f5bcb4b11e293b6f38fe63e0717525d9af79fa2a16e991ed2a58f53bbc3a011736e6da8e25f69e81f9406ccaf32d067f8a0a024ae9bb93279a829f51d9e29cab9b311c5713f12706fcda14f7a2e6b036f04e8ccd3fe8596301e429e0de9af8257d285d9cecc1ad54b6c781e7eb3fb1a14", 0x74}, {&(0x7f0000001700)="10ad600bb5381def9eeadb987b0ca685d1aa868b15516d63fc85d6b80065517d85b2daddeb4aa0af33651615d2aea4335ae3bd7ed36675f82cebee68deb99d8453feb7d1ba097c810589af512c0a663126a7e6f61a0031916954b6df7ad30b9072bda16169c733309e3d42644b91", 0x6e}, {&(0x7f0000001780)="462e040fcf0bc0cc67dbca9548843e71f6ddcd6b43d3ac4f2c1db355ce9f53eeb0601cc81641a874c8ba9ccaa5be8e04e5d29fff1060eef87de3e8ee53efa7d459f6ebda7a20e68ecbfb4d0424eee8dbefaf0c230da64b3abfa9594ef328ef855e3848a7b423119508076418b4926130103c51c70f", 0x75}], 0x6, &(0x7f0000001880)="976a7d669e0f28a38592f8deeba27e05a16ff4a1fb408a1d0cc5eab92978ff9f75f6aa5b891dda3ce90ec5e4f33969f4f85af1901fa23fac9ba094f19de7ade133391e4466e505b97db601926e56ba0576d827a7479739e9fa55304ad32c2e9269ffc305bfe069b5470be05496e57bdbbfe12879f3e4b723b7636465ea024b17f4e4f61a384d50f4a6a443e74f4f7fbc125ad8031281c86a50d62a9ee19fd5835a5d9586dd5e0df68c2c152dc3ee25c77f2a6bdfdfea234a8676b4fe8ca57986", 0xc0, 0x4008004}, 0x440c0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r6, {0x300}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) 22:20:11 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x440042, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400) mq_notify(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff09, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000950}, 0x5840) r2 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0xd3, 0x0) [ 542.884699][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.955244][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:20:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/177, &(0x7f00000000c0)=0xb1) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000280), 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x5c}}, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x20, 0x5, 0x9, 0x1, 0x81, r4}) 22:20:12 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x40200, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x4}, 0x8) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 22:20:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x4c}}, 0x4004000) 22:20:12 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) fchdir(r3) mq_notify(r2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xa00000, 0x10000, 0x4, r2, 0x0, &(0x7f00000000c0)={0xa00902, 0x5, [], @p_u16=&(0x7f0000000000)=0x100}}) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000140)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000240)='\x00', r0) 22:20:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020601000000000000000000006e65742c706f72742c6e6574e700000005000400000000000900020073797a31000000000500050002000000050001000600000014000780080012400000000008001300000000008418b70ff755ec1be3af79721a8ac69baad73ec30dcbc0a8df7a684f65d5dc845d5ebc2a3f25ccfc224e3c076c63d0839fa363be8bf21a20f2454de546545ffe0000000000000000000000005a67adbb0a328552535c1868f85036c11154e6e100"/201], 0x64}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) getdents(r3, &(0x7f0000000240)=""/27, 0x1b) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r4 = msgget(0x2, 0x400) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000280)=""/122) mq_notify(r2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000000)=""/41, 0x29}) 22:20:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x6, 0x4) r1 = msgget$private(0x0, 0x140) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1e) io_setup(0x7f, &(0x7f0000000740)=0x0) io_submit(r7, 0x13c, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000780), 0x431c}]) accept$inet6(r6, 0x0, &(0x7f0000000140)) r8 = syz_open_procfs(r5, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r8, 0x400454ce, r9) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r9, 0x0, r4, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet6_mreq(r11, 0x29, 0x15, &(0x7f0000000240)={@loopback}, &(0x7f0000000280)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:20:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x34, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0xfffffffffffffea4, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x0, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x400200, 0x0) sendto$l2tp6(r2, &(0x7f0000000640)="4fec1a8486a87bff20b74627d67814e4acb88c91e63f76207ffac085585cb6331f0ba1e1707dc18befe57529856794bf9552cc247d40a45f782a9e64e4ef74b84717e92c8a1fc2c18ea8574cdcdc4fd1148c858a15570cf5d056af4893874f6bdff1271ae2325fd2b5740201a4e461610000000028899ad73cd99c0069eab81a396144f5af7949d12ef074e67d344d6d365277d8e22eb3780efb367410f08080aa628bda326eea5737e773d44fe99dab53a6a359", 0xb4, 0x10, &(0x7f0000000600)={0xa, 0x0, 0xf5, @mcast1, 0x7, 0x4}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f00000003c0)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/105, 0x5e) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/235, 0xeb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x3) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000280)=0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000005c0)={0x7, 'dummy0\x00', {0x1}, 0x8}) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r3, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r7, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) fsmount(0xffffffffffffffff, 0x1, 0x73) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) [ 543.632380][T14642] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.693915][T14642] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405b30fb82c5f0000000000007110790000000000045d0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x41) [ 543.838651][ T530] tipc: TX() has been purged, node left! 22:20:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1010) 22:20:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) pread64(r2, &(0x7f0000000240)=""/116, 0x74, 0xfffffffffffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x5) close(r4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f00000002c0)) mq_notify(r4, 0x0) shutdown(r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000), 0x10) [ 543.994824][ T530] tipc: TX() has been purged, node left! [ 544.071266][T14651] IPVS: ftp: loaded support on port[0] = 21 [ 544.217947][T14663] QAT: Invalid ioctl [ 544.294520][ T530] tipc: TX() has been purged, node left! [ 544.320731][T14663] QAT: Invalid ioctl 22:20:13 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) close(r0) mq_notify(r0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 22:20:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x5, 0x1, 0x4, 0x20000, 0x7fffffff, {0x77359400}, {0x4, 0x0, 0x81, 0x80, 0x0, 0x2, "a1c96889"}, 0x80000000, 0x1, @userptr=0xf2a6, 0x78c7, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x2}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x60}}, 0x0) 22:20:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104d2e1a21eeea48bc065e9fb32e526e600"/35, @ANYRES16=0x0, @ANYBLOB="0000000000000000280012800b000100677265746170000018000280060003000000000006000e000000000004001200"], 0x3}}, 0x0) [ 544.883183][T14651] IPVS: ftp: loaded support on port[0] = 21 22:20:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x1, r3, 0x19}, @l2={0x1f, 0x5, @none, 0x81, 0x2}, @xdp={0x2c, 0x0, r5, 0x31}, 0xff, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000100)='veth0_to_bridge\x00', 0xd, 0x100000000, 0xffff}) 22:20:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000000ffffffffffffffffdce523ffaa2df6f05673683a6e65742c706f72742c6e657400003100010000050005008eb7d45040ebe0c3ea0000000500010006000000140007800800124000000000"], 0x64}}, 0x0) [ 545.830195][T14697] __nla_validate_parse: 2 callbacks suppressed [ 545.830227][T14697] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f7, 0x0, 0x0, 0x0, 0xc21, 0x0, 0x0, 0x0, 0xd3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x58310b65, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcde]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf8, 0x0, 0xffffffe0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0xab, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfc47}}}]}]}}]}, 0x87c}}, 0x0) 22:20:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000dc6fab7417b5000800130000000000"], 0x64}}, 0x0) 22:20:15 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 546.199143][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 546.287503][ C1] sd 0:0:1:0: [sg0] tag#1732 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 546.298485][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB: Test Unit Ready [ 546.305370][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.315357][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.325495][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.335863][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.345727][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.355772][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.366087][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.375936][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.385871][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.395724][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.405688][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.415689][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.425941][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.436362][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 546.446510][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:16 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) 22:20:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016000300742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800130000000000"], 0x64}}, 0x0) 22:20:16 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80000, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004000}, 0x800) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x40094) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x210000, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, 0x1, 0x7, 0x101, 0x0, 0x0, {0xc}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe50}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc62}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbd0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xec}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfc0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x4000001) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x480800, 0x0) write$binfmt_aout(r4, &(0x7f00000004c0)={{0x108, 0x2, 0x81, 0x1df, 0x248, 0x4, 0x8e, 0x1}, "fe46634e235a61c0bb9403cdce813ff38c35e9a3267c4124a9d7057bcb97a1cb11aa9678ef8a4b0ab2d2115830444ebd4b3d868aa948b65dffcc12720022c7004fae5b18c1f614fd6e83c6ed4194beb8529d619177f615bd029162ea1509b119e33a004ac28401f407c2f24c113ccc0c01ed8a2170e1c9e974faebdbb20d51ee79015db0725c29c515d47350ad4da5cc8cf9e69d94dc9e5e4204784ba4eb47ca1b2bc31268a47cef1e2b730c506399615ae6171df4b998d8cc183bfcd8a01c6794b90550ea34de3bb7e87262f6ae51ee", [[], [], [], [], [], []]}, 0x6f0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000000bc0)={0xffff, 0x4, 0x7, 0x6, 0x4, 0x50}) write$nbd(0xffffffffffffffff, &(0x7f0000000c00)={0x67446698, 0x0, 0x2, 0x3, 0x4, "b955b59bf93528613813ef54b5d80fe85a3a760f3d6d31bbd268f76c9344e1b88c3782361da2e6d691b69fde7281d1e90dc869da914f52f8aef598f02483125a3556b167ee76e2c2249fe878783362953bd6f51ab9b6206eb4acc53a8e915f8d75dec7cf11faca14ab903d290dc91e62771b5043e9266ea947ce67c4a180c9e5e78b44c5b1"}, 0x95) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000cc0)={0x3, 0x70, 0x72, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1010, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0x7}, 0x8001, 0x3e, 0x3f, 0x6, 0x429, 0x0, 0x1}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000d40)) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/dlm_plock\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/bsg\x00', 0x101000, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000f40)={0xb, @pix_mp={0x8000, 0xff, 0x4745504a, 0x7, 0xe, [{0x10000, 0x3}, {0x2207, 0xfffffffb}, {0xff, 0xc1}, {0x3}, {0x100, 0x5}, {0x9, 0x7}, {0x4, 0x81}, {0x0, 0x75bf}], 0x1, 0x3, 0x7, 0x2, 0x1}}) r10 = syz_open_dev$vcsu(&(0x7f0000001040)='/dev/vcsu#\x00', 0x9, 0x74b940) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001080)={0x0, 0x6}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000001100)={r11, 0x72e5}, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000001180)={0x9e0000, 0x3, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000001140)={0xa10907, 0x80, [], @value64=0x25f}}) fsetxattr(r12, &(0x7f00000011c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000001200)='\\/\x00', 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000001240)='/dev/vbi#\x00', 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x28) r13 = syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x111200) ioctl$VIDIOC_STREAMON(r13, 0x40045612, &(0x7f00000012c0)=0x4) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r14, 0x84, 0x1b, &(0x7f0000001340)={r11, 0x8c, "de14b6ec0ef73e65d44f5432ff9876433835119bad308c3a2ea81373f3cd9550cf9e6c6980421a0a2ab171faea8244b276073f34dd59af766d55f28f3e46b70647f546629658376890371510a54c7b1fdb4cbdf28c640b34c52a1616f3e913d03cf31d7a06ec01ce3c4002ba967fd09fd0f2d17c9954043b0361b7f7647f83ebdab225973771a891f248b62a"}, &(0x7f0000001400)=0x94) 22:20:16 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 547.617280][T14716] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 547.636195][ C1] sd 0:0:1:0: [sg0] tag#1733 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 547.647670][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB: Test Unit Ready [ 547.654649][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.664176][ C0] sd 0:0:1:0: [sg0] tag#1734 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 547.664523][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.675508][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB: Test Unit Ready [ 547.685672][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.692162][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.702140][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.711915][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.721757][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.731463][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.741410][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.751578][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.761564][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.771584][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.781492][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.791239][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.801590][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.811614][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.821873][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.839662][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.849610][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.859745][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.869523][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.879681][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.889934][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.899716][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.909553][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.919522][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.929601][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.939519][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.958981][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.969098][ C0] sd 0:0:1:0: [sg0] tag#1734 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:17 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) 22:20:17 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 548.264610][T14732] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 548.307231][T14732] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206010000000000000000000100000016000000686173068f5a77fee26b7633abf981de006e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050000002d050001000600000014000780080012400000000008001300000000000000005a0413dd7da776db96d823bf0530c037ac0c7139da72c4ed3b0d36ffd2509d9d78c12c07460034"], 0x64}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$BLKRRPART(r2, 0x125f, 0x0) 22:20:17 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) 22:20:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffffbb, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:20:17 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 548.595900][T14743] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 548.616027][ C1] sd 0:0:1:0: [sg0] tag#1735 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 548.627648][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB: Test Unit Ready [ 548.634510][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.645208][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.655190][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.665403][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.675731][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.685832][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.695800][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.705772][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.716294][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.726223][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.736238][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.746163][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.757345][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.769582][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.780764][ C1] sd 0:0:1:0: [sg0] tag#1735 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.790200][ C1] sd 0:0:1:0: [sg0] tag#1736 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 548.801108][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB: Test Unit Ready [ 548.807971][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.818060][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.828677][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.838982][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.858631][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.868571][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.878800][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.889243][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.899493][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.909552][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.919512][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.929447][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.939551][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.949500][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.959418][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:17 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 549.237383][ C1] sd 0:0:1:0: [sg0] tag#1740 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 549.248079][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB: Test Unit Ready [ 549.254838][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.264665][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.274513][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.284372][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.294328][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.304176][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.314110][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.323964][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.333798][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.343644][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.353523][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.363255][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.373114][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.383058][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.392912][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x1}, 0x14}}, 0x24004090) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x800, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990afc, 0x0, [], @value=0x7ff}}) sendto$inet6(r1, &(0x7f0000000100)="4af5a9aee90658ad68318f7cd65319ce41c4af0da54455b7965aecfe485a69a5c1d5fd32b608ae08ddd23cf20f785185486a24060025f476d0baf42ecb643e8511e7afd83d6818488cce7e5b24ba6149d1e8c2f68fe1e4369908c913b31e57eb2f98e49d76984b8e3d092c2a6fd3fcff74f9aae45d91435f735adb5fb2f4a23dfef6b013dab9265c51e291274d907d307920fcae88cac71f6af310f860e41e28cd38e3f53072595a1b200ea1daa993970db6b0e1ca8f52a9705f1e0f835c3e0c21165bfa342723b94580cdc8654964612edb2982dfb0eee6a192022f0ec54f", 0xdf, 0x1, &(0x7f0000000200)={0xa, 0x4e23, 0x80000000, @mcast1, 0x200}, 0x1c) 22:20:18 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) 22:20:18 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:18 executing program 4: r0 = socket(0x2, 0x3, 0x1d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000340), &(0x7f00000003c0)=0x4) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={{r4}, 0x1, 0xfff}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000002c0)={0x3, 'veth1\x00', {0x7fff}, 0x200}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000380)=@add_del={0x2, &(0x7f0000000040)='xfrm0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000300)={0x0, 'bond_slave_0\x00', {}, 0x19}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='L']}) [ 549.479976][ C0] sd 0:0:1:0: [sg0] tag#1737 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 549.490636][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB: Test Unit Ready [ 549.497384][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.507220][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.517182][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@RTM_NEWNSID={0x1c, 0x58, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x1c}}, 0x20088014) 22:20:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@empty, @remote, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "f9701f", 0x116, 0x11, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, {[@hopopts={0x2f, 0x7, [], [@enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xe}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x81, 0x6, [0x7f, 0x100000000]}}, @ra={0x5, 0x2, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x8}]}, @fragment={0x3c, 0x0, 0x40, 0x0, 0x0, 0x1f, 0x65}], {0x4e20, 0x4e22, 0xc6, 0x0, @gue={{0x1, 0x1, 0x2, 0x81, 0x0, @void}, "813487d356bcf5919bd87bf07f0b72ab9613a31a04a6731f1990daeddb8980c5fb1c4ca741e591ccc0c370aaf6d760ddb733d28a469437cbb16f9ca28a1a16caa50d97c2f056d3918e6f9d587353ffc9ab905392e22dee6c7c8b8f3b270e50975468fad192ad80493699bf714e6726dbe2a2dbd53ba3787c16b066374d06b26bd43209b3e5260a7be30372754066f4d8fc4e7c3898fdcf06181cf327287fe443ccac99cf8ee9c30de883f0ac54fc818115cd18f5fbffcb3ad998"}}}}}}}}, 0x150) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7, 0x430200) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80008c000206010000000000000000000000000016000300686173683a6e65742c706f72742c6e657400000000000300686173683a6e65742c706f726543487c0900020073797a3100000000050005000200000000000100060000001400078008001240000000000800130000000000"], 0x80}}, 0x0) [ 549.527003][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.536876][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.546694][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.556575][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.566375][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.576223][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.586055][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.595907][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.605940][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.615818][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:18 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 549.625623][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.635542][ C0] sd 0:0:1:0: [sg0] tag#1737 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.644455][ C0] sd 0:0:1:0: [sg0] tag#1738 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 549.655197][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB: Test Unit Ready [ 549.661821][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.671711][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.681539][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.691408][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.701328][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.711145][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.720969][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.730884][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.740894][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.750713][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.760548][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.770362][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.780190][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.790017][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.799817][ C0] sd 0:0:1:0: [sg0] tag#1738 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.808719][ C0] sd 0:0:1:0: [sg0] tag#1739 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 549.819337][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB: Test Unit Ready [ 549.826031][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.835857][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.845674][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.855481][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.865316][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.875128][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.884933][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.894746][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.904711][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.914536][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.924363][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.934180][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.944447][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.954277][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.964094][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.972906][ C0] sd 0:0:1:0: [sg0] tag#1741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 549.983594][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB: Test Unit Ready [ 549.990229][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.000069][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.010674][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.020652][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.030775][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.040975][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.051071][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.060912][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.070758][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.080599][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.090457][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.100298][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.110120][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.121092][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.131066][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setstatus(r1, 0x4, 0x2000) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x12000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x9, 0x78, 0x2, 0x3f, 0x4, 0x1, 0x3, 0x6, 0x0, 0x1}, 0xe) 22:20:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet(0xa, 0x801, 0x0) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x7d, &(0x7f0000000400)={r4}, 0x26) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1ff, 0x7, 0x3, 0xfff, 0x3ff, 0x3, 0x3ff, 0xd306, r4}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={r4, 0x2, 0x5}, 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x2000000, 0x4) r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmmsg$inet6(r7, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0xc, 0xffffffc1, 0xff, 0x1ff}) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r8) mq_notify(r8, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r8}, 0x10) 22:20:19 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:20:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @mcast1}, 0x1c) 22:20:20 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:20:20 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x0, 0x200, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100"/20], 0x14}}], 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4040, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x78, 0x80000001, 0x3, 0x401}}) 22:20:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x200}, 0x10, 0x0}}], 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500000dd7037670f15d030000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x84, 0x16, 0x2, 0x70bd25, 0x25dfdbff, {0xa, 0x8, 0x12, 0xfe, r6}, [@IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0x0, 0x41, 0x8}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x401, 0x1, 0x1000}}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x11}}, @IFA_CACHEINFO={0x14, 0x6, {0x401, 0x401, 0xa0, 0x3}}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x800) [ 551.125170][ T530] tipc: TX() has been purged, node left! [ 551.170304][T14800] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 22:20:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0xfffffffffffffffe, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000000)=""/3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setregid(r3, r2) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) prctl$PR_GET_TIMERSLACK(0x1e) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setregid(r5, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r6 = syz_open_procfs(r0, &(0x7f0000000080)='net/fib_trie\x00') r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="000802000000fddb9baf7adf2504000000050001000000000014000200fe8000000027a88a3c0fb200000000000000000000aa14626f6e640000001400020000000100000000000000000040000000487c3901e591f95200000000000000000000000105000100000000002900070073797374656d5f753a6f626a6563745f723a67726f75706164645f657865635f743a7330000000000500"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x48004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r8, r6, 0x0, 0x10000007) 22:20:20 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:20 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x93d8271aaff44e04) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000440)={0x0, 0x3, 0x4, 0x0, 0x4, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a62cb865"}, 0x0, 0x0, @userptr=0x8000000000000, 0x0, 0x0, r1}) [ 551.505198][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 551.505320][ C0] sd 0:0:1:0: [sg0] tag#1745 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 551.522813][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB: Test Unit Ready [ 551.529518][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.539354][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.549427][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.559438][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.569250][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.579094][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.589890][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.599819][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.609893][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.619724][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.629640][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.639591][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.649425][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.659261][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.669105][ C0] sd 0:0:1:0: [sg0] tag#1745 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:20 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:21 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'macvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="f300000000000000120012000b0001006970766c616e00000400020008000500", @ANYRES32=r3, @ANYBLOB="9677268e2735f4eaa6fa58fbbfd863fd1f7819520a3ace6bff8520827e1f764d5026718ae2954c098202c6109771e1316044447ac7c2fdf30f58"], 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x400, 0x20000) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) mq_notify(r7, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x41) sendmmsg$alg(r4, &(0x7f0000000140), 0x2, 0x0) [ 551.994383][ C0] sd 0:0:1:0: [sg0] tag#1746 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 552.005049][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB: Test Unit Ready [ 552.011671][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.021535][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.031406][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.041272][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.051116][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.060948][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.070885][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.080810][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:21 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 552.090840][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.100812][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.110817][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.120755][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.130635][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.140569][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.150446][ C0] sd 0:0:1:0: [sg0] tag#1746 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:21 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) clone(0x90120000, &(0x7f0000000540)="756fe8f124824d782fafb9849778", &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="b1e2417b7d6d2daaff29e449d286816d566cb14d7a67cbc7ee56649af5bc17f21e0c6e2e1766d1c2edc0e68fab02f9c473db0f6771aad92af2f5f0e808290ad132ebade6c99bb7fa752d6260f64ac8036b4734a4243e3ea508dcbe2e6cb9da302166a4b00a5d108ea7c73f7ff09b599b3cd29a1f8e6f7f74114860fa5c408e252c7c8e23") bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:21 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 552.455103][ C0] sd 0:0:1:0: [sg0] tag#1756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 552.465844][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB: Test Unit Ready [ 552.472462][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.482325][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.492150][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.501983][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.511817][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.521780][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.531631][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.541647][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.551493][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.561357][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.571285][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.581651][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.591645][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.601484][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.611313][ C0] sd 0:0:1:0: [sg0] tag#1756 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.620244][ C0] sd 0:0:1:0: [sg0] tag#1757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 552.630842][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB: Test Unit Ready [ 552.637658][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.648213][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.658818][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.668714][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.678611][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.688675][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.698789][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.708649][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.718574][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.728509][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.738563][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) mq_notify(r2, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036677265000028000280050016000200000014000700ff02000000000000000000000000000108000100", @ANYRES32=r3, @ANYBLOB="f6ee5d7eb87ca1003271effcfabc5994d62c3c0fa739fa9cf7d98e238b76471dfc38c4619a6af586ea707b708c6b08a041b30000000000000000f154c3eabf3e4ac95c55b5dcda282ed486b51e3967d22c6c1c96727bb2a9bb063327494230bb2cb282097403153cc51a10ba92ed011565136b5fd2d021a300aed6e230e54c201312e30099ebfc0d901bb9555f60261e5d"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x86, "54d155a43c6c8738576d5d4f3d87d74849829018ae35f5921d964f2e3e368e4b060a9798e739d634eef7ba414b8c8b16dfa285c4498fb458e48c48d949569906e6f4d96da094bb2c7b8977d637f94dd06752682467a962ff3dd3e9631f56cf6379d107788a6f7910b782c766b77690d4f9867aa4470111418836c09c9864674a23aa8ddd7263"}, &(0x7f0000000080)=0x8e) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) mq_notify(r6, 0x0) close(0xffffffffffffffff) mq_notify(0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000000)={0xd3fe, 0xffffffff, 0x1, 0x0, 0x0, [{{}, 0xffff}]}) mq_notify(r5, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000300)={0x34, 0x6, 0x0, {0x0, 0x5, 0xb, 0x0, ',\x12nodevbdev'}}, 0x34) [ 552.748506][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.758854][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.768806][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.778644][ C0] sd 0:0:1:0: [sg0] tag#1757 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.893015][ C1] sd 0:0:1:0: [sg0] tag#1758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 552.903736][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB: Test Unit Ready [ 552.910372][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.920273][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.930172][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.940176][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.950093][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.960004][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.969950][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.980188][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.990114][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.000219][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.010080][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.019981][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.029829][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.039720][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.049674][ C1] sd 0:0:1:0: [sg0] tag#1758 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) close(r1) mq_notify(r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x927, 0x9, 0x4, 0x2000, 0x4, {0x77359400}, {0x3, 0xc, 0xff, 0xff, 0xa5, 0x81, "771497e3"}, 0x0, 0x2, @fd=r2, 0x101, 0x0, r0}) unshare(0x10010080) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00']) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000560007031dfffd946f610500070000040200000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 22:20:22 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:22 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 553.282405][ C1] sd 0:0:1:0: [sg0] tag#1759 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 553.290408][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.293107][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB: Test Unit Ready [ 553.309056][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.319175][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.329081][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.339134][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.349114][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.359146][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.369122][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.379037][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.389138][ C0] sd 0:0:1:0: [sg0] tag#1760 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 553.389317][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB: Test Unit Ready [ 553.399842][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.406427][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.416233][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.425942][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.435763][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.445610][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.455341][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.465133][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.474863][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.484595][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.494342][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.504129][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.513945][ C1] sd 0:0:1:0: [sg0] tag#1759 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.523639][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.542148][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.551961][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.561772][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.571607][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:22 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 553.581418][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.591282][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.601205][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.611024][ C0] sd 0:0:1:0: [sg0] tag#1760 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.761041][ C1] sd 0:0:1:0: [sg0] tag#1761 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 553.772063][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB: Test Unit Ready [ 553.778964][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.789121][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.799050][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.809082][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.818978][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.828806][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.838762][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.848604][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.858598][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.868490][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.878394][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.888244][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.898248][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.908246][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.918154][ C1] sd 0:0:1:0: [sg0] tag#1761 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:23 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:23 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 554.403048][ C1] sd 0:0:1:0: [sg0] tag#1762 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 554.413866][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB: Test Unit Ready [ 554.420592][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.430591][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.440520][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.450642][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.460581][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.470545][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.480621][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.490579][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.500513][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.510779][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.520737][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.530787][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.540741][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.550818][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.560759][ C1] sd 0:0:1:0: [sg0] tag#1762 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.569858][ C1] sd 0:0:1:0: [sg0] tag#1763 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 554.580668][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB: Test Unit Ready [ 554.587476][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.597522][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.607449][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.617453][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.627581][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.637686][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.647616][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.657738][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.667931][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.677970][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.688640][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:23 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:23 executing program 5: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 554.699181][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.709860][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.720413][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.730736][ C1] sd 0:0:1:0: [sg0] tag#1763 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:23 executing program 3: r0 = socket$nl_netfilter(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={&(0x7f0000000680)={0xa, 0x0, 0x8e00}, 0x2bb30e2a68d4f7b6, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x2}}, 0xfc00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003d40)=@ipv4_newaddr={0x18, 0x14, 0x300}, 0x18}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000003c0)=""/231, 0x1b) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101802, 0x0) pwritev(r3, &(0x7f00000019c0)=[{&(0x7f0000000280)="c4", 0x300}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000002060300000000000000000042000006"], 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x4028045) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x84602, 0x0) r5 = socket(0x3, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x80000001, 0x2, 0x1e}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa8}, 0x3bf, [0x3, 0x9, 0xffffff5f, 0x800, 0x401]}, 0x5c) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) r9 = accept4(r8, &(0x7f0000000140)=@caif=@util, &(0x7f0000000000)=0x80, 0x40800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959a2f8d4cb0baf48ba8a8d24a25bf5f947d295fb747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b", @ANYRES16=r11, @ANYBLOB="02002bbd7000ffdbdf250200000c080002"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fcffffff", @ANYRES16=r11, @ANYBLOB="020028bd7000fbdbdf25020000000800020003000000080002000100000008000100020000004c0004800800020003000000d4000c80e4000880d79fc94aa7796127e287e18842585de0a1"], 0x238}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c010) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000007bc0)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007b80)={&(0x7f0000007a00)=ANY=[@ANYBLOB="7bc50000", @ANYRES16=r11, @ANYBLOB="300328bd7000fcdbdf250100000030010c8024000b8008000900ef30823908000a000e940000080009000300000008000a00373f00003c000b8008000a00801f000008000a009807000008000a00d2bb000008000a00ce7f000008000900d5202f0e0800090082f56675080009007d43802c34000b8008000a0070f50000080009006393b44c08000a00a0d2000008000a007706000008000a00fcc5000008000900fce57d432c000b8008000a00d391000008000a00dcc5000008000a00da8b000008000900071f1a3808000a00528200004c000b8008000a004d2c00000800090017db623c08000900ea984050080009002065273208000900645b0a3c08000a00da36000008000a007dde0000080009009b94c77308000900f9db1e4514000b8008000a00329a000008000a00ad3200000c000b8008000900dc22b964"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x200410c0) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x178, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1667789a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57d860a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e848bf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xb66ea6d3f5085afa}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5516}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9254}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79d0b8d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c7aebc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8753}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x147e7c3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x604f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1059}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x115768d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8925}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa97b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b4fa26c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a8fea90}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x437659d7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fa3abad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x784e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e945d63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd171248}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0b30d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4507}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabf8}]}, {0x4}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r11, 0x8, 0x1, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x884) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="bf290000", @ANYRES16=r11, @ANYBLOB="100027bd7000fbdbdf250300000008000100030000003c0004800500030007000000050003000600000005000300050000000500030007000000050003000500000005000300070000000500030005000000"], 0x58}}, 0x48005) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="000125bd7000fddbdf2503000000ca9a519002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4044800) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f40)={0x53c, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e812e7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28f2d865}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbccd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x332a0df0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92e5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x156d0fa8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1b4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51500dd1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x554dab8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8bde591}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x424a50a7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d7ba06f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43d3640a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dc379fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x221af3f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x473368cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe0a68ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24f179bf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0ad419}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14a81fb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x359ed9f0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a42d0ae}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f6ae0c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bb2dd28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c50bd14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a21fde5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b6f6dfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27cfd5f0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x249f3802}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4354fa3}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c05}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4feb91ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40971f92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x767}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c5e0000}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x726cf500}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x520bd381}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f001d8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcebd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x329f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58a4de20}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46723dde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd193}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x167c28f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15bf74ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb363}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3557feec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8131}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76d50ae4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0adaab}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf458}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x702d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2615}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7319b6c1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf44e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22476356}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x262112b9}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed3d8c4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x462fd71e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x392cb38b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f2a348a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6676ec60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fd8271}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3badb873}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42d0fef7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x322a82b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57371889}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd23c47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c926b47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}, {0x4}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cff02a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14c1b94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a3115ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15883f9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6257578d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x610e8acb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35b0fc9b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e7fda28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ee6a3d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dc40d70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55b0fd8d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc760}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ef2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf37a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe55a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f41}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa54b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c6430c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a072419}]}]}]}, 0x53c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40800) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x23c, r11, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366fa309}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31861242}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b6c5403}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a8f7a37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d2877b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58116e1a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11da42a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e7e8330}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4071}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe40b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3648fce1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ed1fecb}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x759c82b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a23af03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6157081b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cf37fce}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x228662dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69ce20d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x735ef326}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ae74635}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d390cdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11917043}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x556560be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4118f42d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b21be03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab34}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xca386b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x397e4b3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79269091}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40d7a4a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x743122d1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38a8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80fc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x613d0993}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54cd28ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a95}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb724}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0f956e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44cc8515}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56ad0bdf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf70}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70606fe1}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48884) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x24040) close(r1) mq_notify(r1, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={&(0x7f0000000680)={0xa}, 0x3dd, &(0x7f00000005c0)={&(0x7f0000000640)={0xffffffffffffffe3}, 0xffd8}}, 0x0) 22:20:24 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:24 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 555.048145][T14867] device lo entered promiscuous mode 22:20:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) getrlimit(0xd, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x9, 0x4000) mq_notify(r0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 22:20:24 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff14, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000a00000a1f0000031410080008000a0012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) 22:20:24 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r5 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f0000000280)=""/79, 0x4f) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 555.615181][T14871] Y­4`Ò˜: renamed from lo 22:20:24 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:25 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r0, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000100)=0x4) fcntl$setsig(r3, 0xa, 0x20) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) open(&(0x7f0000000080)='./control\x00', 0x3e3cc2, 0x0) 22:20:25 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b00)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x240087bd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\f', 0xfb386d1f6a4fd57d, 0x400800a, 0x0, 0xae19fea218018fd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="001500bfce8548", @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf251a00000007002100626200000400cc00340022800800020008000000080007000000000008000500010400000800050009000000080001000700000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20041045) socket$inet6(0xa, 0x3, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl(r3, 0x800000000000937e, &(0x7f0000000080)="0100000000000000180100000400005840a50d00000000002f") chdir(&(0x7f0000000140)='./file0\x00') r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) mq_notify(r4, 0x0) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffe6a, 0x700, 0x0, 0xb84608a41099d4b8) 22:20:25 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:25 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4200, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x10000, @ipv4={[], [], @remote}, 0x6}}, 0x0, 0x0, 0x4e, 0x0, "6812c869e8f0f6ff5a3ea0898b97bb0815ca7a01edaf266d1a444f67539de0b56439f5244364d2b224965b1bcd1e4b0146ef9b9205ba4aff39f0ea16c76d9c5bf2d998d7e5118a3db2bad5218a8a4f52"}, 0xd8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000740)="768542f4a747604c01d908407801bf9010063037780953c84a646631712cda943146fbb9fe5726e09c9d40fdfa18570115931dd1993f8043b788d24c1551cefcb5153d20b4e632697c9719c0a6f858ad6c1bd5f465abb4c921955fb6086244113182b8f313593c70206eb613cd116ca4a388a9782d215e5884f53051d52101ea9e6b5f4732a3001bd238965172bacf7a82f5b4ed470000e28d20a1b63316035911bcc91665ae6e37b5246b01389448912f207cafed83929bf585db493494ad2b0d9bd374499572bbac2ba3d36582cdc638f35fc0839982d1d3adbc37f54d6a0904", 0xe1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000006c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000700)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0xffffffffffffffff) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r9, 0xffffffffffffffff) keyctl$chown(0x4, 0x0, r7, r9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r11 = mq_open(&(0x7f0000000940)='eth0\x00\x04\xad\xbb\xcf\x88\x8a\xa0W\xcd\xfa\xed,\x007\rlg\xe20i\xf2\xdb\xc0\xcf8\xbf\xb9s4\xb4G\xb1\xfd5\x02\x94S\xd7\v0x0) r14 = socket$inet(0x2, 0x3, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r14, 0x0, 0x43, 0x0, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x90001, 0x0) r15 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xffffffffffffdc89, 0x0) fstat(r15, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000008c0)={r13, 0x0, r16}, 0xc) keyctl$chown(0x4, r3, r7, r16) pidfd_getfd(r0, r2, 0x0) [ 556.785777][ C0] scsi_io_completion_action: 7 callbacks suppressed [ 556.785909][ C0] sd 0:0:1:0: [sg0] tag#1771 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 556.803796][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB: Test Unit Ready [ 556.810461][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.820540][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:25 executing program 5: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x552826d95e848bac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) request_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x309, r2) keyctl$read(0xb, r3, 0xffffffffffffffff, 0xfffffffffffffefb) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvfrom$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x719000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf250f000000140006800400020004000200040002000400020014000280080001000100000008000200010000005400038008000100ff030000080002003f00000008000300020000000800010000000000080002000080000008000200c00700000800020000080000080001003f00000008000100afd16a2a08000200ff0000002c0005800700010069620100756470000c0002800800020004000000040002800700010069620000340003800801001b0100000800010001040000e7b0000008000200d3a498bb4eea667bae758d040000080002001f0000000800"], 0xf0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) connect$rds(r7, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) epoll_create1(0x0) add_key$user(&(0x7f0000000480)='user\x00', 0x0, 0x0, 0x0, r4) memfd_create(0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) unshare(0x60020000) [ 556.831468][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.841916][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.852014][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.863500][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.873424][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.883609][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.893702][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.903707][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.913907][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.924457][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.934690][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.945122][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.955250][ C0] sd 0:0:1:0: [sg0] tag#1771 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:26 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r4) shmdt(r4) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 557.126194][ C0] sd 0:0:1:0: [sg0] tag#1772 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 557.137768][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB: Test Unit Ready [ 557.144735][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.155604][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.165943][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.176402][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.186373][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.196450][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.206523][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.217349][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.224409][T14913] IPVS: ftp: loaded support on port[0] = 21 [ 557.227355][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.243273][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.253752][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.263565][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.273656][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.284270][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.294462][ C0] sd 0:0:1:0: [sg0] tag#1772 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:26 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) io_setup(0x2, &(0x7f0000000000)) [ 557.713210][ C0] sd 0:0:1:0: [sg0] tag#1780 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 557.724229][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB: Test Unit Ready [ 557.730903][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.741790][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.751688][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.762280][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.772540][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.782632][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.792918][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.802921][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.813424][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.823725][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.833870][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.844297][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.854364][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.864240][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.874651][ C0] sd 0:0:1:0: [sg0] tag#1780 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:27 executing program 3: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8200, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f00000001c0)=0x80000000, 0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 22:20:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f25ecdb4cb92e0a480e0014000000e8bd6efb250009000e000100400000ff050a05001201", 0x2e}], 0x1}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x81800) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffb}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 22:20:27 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 558.135885][T14933] IPVS: ftp: loaded support on port[0] = 21 [ 558.174889][ C0] sd 0:0:1:0: [sg0] tag#1781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 558.186245][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB: Test Unit Ready [ 558.193022][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.202895][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.213409][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.223248][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.233153][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.243568][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.253733][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.264422][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.274321][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.284456][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.294281][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.304324][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.314603][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.324502][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.335102][ C0] sd 0:0:1:0: [sg0] tag#1781 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:27 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 558.439839][ T737] tipc: TX() has been purged, node left! [ 558.545393][ C0] sd 0:0:1:0: [sg0] tag#1782 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 558.556775][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB: Test Unit Ready [ 558.563723][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.573922][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.583968][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.593967][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.603826][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.613659][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.623645][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.633547][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.643463][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.653219][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.663127][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.672968][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.682812][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.692655][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 558.702496][ C0] sd 0:0:1:0: [sg0] tag#1782 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:27 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x840082, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c2478181de3f9dc53489d9249b"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4247956688"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 22:20:27 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:28 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:28 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 559.230656][ C0] sd 0:0:1:0: [sg0] tag#1783 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 559.241332][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB: Test Unit Ready [ 559.248095][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.257937][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.267821][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.277644][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.287516][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.297336][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.307217][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.317160][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.327062][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.336886][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.346750][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.356610][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.366476][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.369734][ C1] sd 0:0:1:0: [sg0] tag#1785 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 559.376467][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.387030][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB: Test Unit Ready [ 559.396801][ C0] sd 0:0:1:0: [sg0] tag#1783 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.403416][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.412221][ C0] sd 0:0:1:0: [sg0] tag#1784 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 559.421666][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.432049][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB: Test Unit Ready [ 559.441752][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.448327][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.458033][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.467697][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.477395][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.487054][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.496752][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.506422][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.516098][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.525838][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.535514][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.545195][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.554899][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.564610][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.574327][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.584013][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.593711][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.603547][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.613151][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.622822][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.632510][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.642166][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.651869][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.661575][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.671287][ C1] sd 0:0:1:0: [sg0] tag#1785 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.680991][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.699317][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.709176][ C0] sd 0:0:1:0: [sg0] tag#1784 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/239, 0xef}, {&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000340)=""/56, 0x38}], 0x3, 0x4d) socket$inet6_tcp(0xa, 0x1, 0x0) 22:20:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) mq_notify(r5, 0x0) close(r5) mq_notify(r4, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000300)={0x7, 0x6d, 0x2}, 0x7) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:shadow_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr="4ba512694116a7796679b0749d4f0e40"}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf25060000000800f6ffac141422"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a31000000000500050002000000050001000600000014000780080012400000000008001f0000000000"], 0x64}}, 0x0) 22:20:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000000)="240000001e0025eaa87865f51ef6bce90a013b0200bff20182a9000c080009000d000000", 0x418) 22:20:30 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) getsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0xb9155204ef45c492, 0x0) 22:20:30 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmdt(0x0) shmdt(0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 561.262512][ T31] audit: type=1326 audit(1583014830.338:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f28a code=0x0 [ 561.305517][ C0] sd 0:0:1:0: [sg0] tag#1786 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 561.316343][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB: Test Unit Ready [ 561.322973][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.332871][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.342768][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.352631][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.362683][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.372543][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.382409][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.392277][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.402199][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.412261][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.422076][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.431871][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.441676][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.451685][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.461517][ C0] sd 0:0:1:0: [sg0] tag#1786 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1545e3aabe0eff4ea0f93434a4a2e357bc8e75d3"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2004}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="fe025133806c632d5b7b7633bd8e35f28cd46382b030c3b8429d3ebbc341c3874a22d8984a6d15fbdadd5bb0fc", 0x2d) 22:20:30 executing program 5: syz_emit_ethernet(0x9b, &(0x7f0000000000)={@link_local, @random="1a38c63400b2", @void, {@ipv4={0x800, @tipc={{0x19, 0x4, 0x0, 0x1, 0x8d, 0x66, 0x0, 0x6, 0x6, 0x0, @multicast2, @loopback, {[@generic={0x86, 0x12, "bee82333ca81b04d11b5c2b8189a38c3"}, @generic={0x83, 0xe, "12832042f5629f69d18efef0"}, @timestamp_addr={0x44, 0x14, 0x14, 0x1, 0x9, [{@empty, 0x7fff}, {@loopback, 0x22f000}]}, @end, @lsrr={0x83, 0x13, 0x50, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x7fff]}, @rr={0x7, 0x7, 0xea, [@multicast1]}]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x1, 0xa, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x1, 0x2, 0x7, 0x6, 0x2, 0x4e24, 0x4e24}, 0x2, 0x1}, 0x1, 0x2}}, [0x0]}}}}}, 0x0) 22:20:30 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmdt(0x0) shmdt(0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c090}, 0xc005) [ 561.787954][T14989] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 561.891835][T14996] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 561.896078][ C0] sd 0:0:1:0: [sg0] tag#1787 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 561.912892][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB: Test Unit Ready [ 561.919674][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.929614][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.939551][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.949711][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.959684][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.969504][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.979435][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.989257][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.999091][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.009052][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.019303][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.029116][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000240)=@buf) [ 562.038962][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.048817][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.057116][ T31] audit: type=1326 audit(1583014831.128:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f28a code=0x0 [ 562.058601][ C0] sd 0:0:1:0: [sg0] tag#1787 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:31 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:20:31 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmdt(0x0) shmdt(0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0x4}}}]}]}, 0x64}}, 0x0) 22:20:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x10400000000, 0x400400) r5 = gettid() r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') getgid() writev(r0, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) ioprio_get$pid(0x2, r5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r5, 0x1004000000016) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000140)={0x18, 0x0, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'bridge0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f000000d180), 0x4000000000000eb, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000140)={0x18, 0x0, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'bridge0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f000000d180), 0x4000000000000eb, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000140)={0x18, 0x0, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'bridge0\x00'}}, 0x1e) sendmmsg(r10, &(0x7f000000d180), 0x0, 0x4048080) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000140)={0x18, 0x0, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'bridge0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f000000d180), 0x4000000000000eb, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000140)={0x18, 0x0, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'bridge0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f000000d180), 0x4000000000000eb, 0x0) fgetxattr(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16=r8, @ANYRES32], @ANYRESDEC=r9, @ANYRESHEX, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r10, @ANYBLOB="069eec097cc7ca7a9d64154201f3f5ae38c25ea52b35f15e1316c0a5845b19fda5db1189fabfa443294ea8412430493cbe963f808b60728a608d04c62bb9bf9f9ae2c6b2b080fcaaea3e61c1368eff0d76e8cc12e9ae05"], @ANYRES64=r6, @ANYRESDEC=r11, @ANYRES16=r12], 0x0, 0x0) close(r3) dup2(r4, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0xfc, 0x0, 0x2, 0x4, 0xfd, 0x0, 0x2, 0x6b74, 0x8000}, {0x1, 0x0, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x1, 0x81, 0x3, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(r7) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) [ 562.283914][T15005] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 562.435039][ C0] sd 0:0:1:0: [sg0] tag#1788 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 562.445825][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB: Test Unit Ready [ 562.452452][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.462340][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.472195][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.482023][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.491865][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.501675][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.511626][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.521585][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) r1 = semget$private(0x0, 0x0, 0x140) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f00000000c0)=0xfffffc00) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x39f7596f, 0x608080) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000d4}, 0x24048800) [ 562.531410][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.541240][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.551103][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.560918][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.570985][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:31 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmat(0x0, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 562.580922][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.590748][ C0] sd 0:0:1:0: [sg0] tag#1788 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2a6, 0x0, &(0x7f00000012c0)="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"}) 22:20:31 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmat(0x0, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x3ad757e254aa2282, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010300000000000000000200000016000300686173683a6e65742c706f72742c6e657400000005000400010000000900020073797a3100000000050005000275b977680001ea060000001400078008001740000000000800130000000000"], 0x64}}, 0x0) 22:20:32 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4b6181, 0x0) r2 = shmat(0x0, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:32 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f00000006c0)=0x7) setresuid(0x0, r2, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) getgid() lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) stat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) msgctl$IPC_SET(r0, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) signalfd(r3, 0x0, 0x0) msgget$private(0x0, 0x1) msgctl$IPC_STAT(0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f00000006c0)=0x7) setresuid(0x0, r5, 0x0) r6 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) getgid() lsetxattr$system_posix_acl(&(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f00000005c0)={{}, {}, [{}], {0x4, 0x2}, [], {0x10, 0x4}}, 0x2c, 0x0) fstat(0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x1}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r7, 0x1, 0x5, 0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) socket(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) getgid() lsetxattr$system_posix_acl(0x0, &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) socket(0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000300), 0x4) msgctl$IPC_STAT(0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a80)={{{@in6, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f00000005c0)={{}, {}, [{}], {}, [{0x8, 0x9}, {0x8, 0x0, 0xffffffffffffffff}]}, 0x3c, 0x0) fstat(0xffffffffffffffff, 0x0) stat(&(0x7f0000000580)='./bus\x00', 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socket(0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a80)={{{@in6, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, 0x0) getgid() getgroups(0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) memfd_create(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) [ 563.180197][ C0] sd 0:0:1:0: [sg0] tag#1789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 563.190834][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB: Test Unit Ready [ 563.197591][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.207608][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.217460][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.227272][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.237174][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.246993][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.256816][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.266686][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.276521][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.282952][T15039] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 563.286462][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.286568][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.316059][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.325880][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.335886][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.345713][ C0] sd 0:0:1:0: [sg0] tag#1789 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.354649][ C0] sd 0:0:1:0: [sg0] tag#1790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 563.365243][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB: Test Unit Ready [ 563.371886][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.381708][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.391767][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.401592][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.411598][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.421878][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.431725][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.441660][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.451484][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.461351][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.471263][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.481094][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.491035][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.500867][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.501683][ C1] sd 0:0:1:0: [sg0] tag#1728 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 563.510806][ C0] sd 0:0:1:0: [sg0] tag#1790 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.521282][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB: Test Unit Ready [ 563.536615][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.546679][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.556639][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.566557][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.576418][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.586323][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.596313][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.606177][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.616075][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.625927][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.635890][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.645798][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.655720][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.666073][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)) [ 563.676419][ C1] sd 0:0:1:0: [sg0] tag#1728 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:20:33 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4000000000000800, 0x1}, 0x3c) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) [ 564.189190][ C1] sd 0:0:1:0: [sg0] tag#1731 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 564.200238][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB: Test Unit Ready [ 564.207377][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.218038][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.228117][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.238269][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.248656][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.258741][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.268798][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.278688][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.288671][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.298859][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.308802][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.319564][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.329797][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.339922][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 564.350132][ C1] sd 0:0:1:0: [sg0] tag#1731 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='squashfs\x00', 0x0, 0x0) 22:20:34 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000140)=""/132, 0x84}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/118, 0x76}], 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = accept$phonet_pipe(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000340)={0x0, 0x1000}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000020601000000000000f900000000000016000300686173683a6e65742c706f72742c6e5d1244fd00050004000000000005000500000000004800078008000840000000a0050015002000000008001240000000050800094000000fff080013400000007f060004404e2100000c000280080001407f0000010500140072c639d2cd4b95d80600000014000780080012400000000008ef130000000000"], 0xa0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000)) 22:20:34 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7fffffff}, 0x1c) tkill(r2, 0x1000000000016) 22:20:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @rand_addr="00080000c0b674d48cf3aceac388be00"}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x7fffffff, 0xd8d, 0xfff, 0x0}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) mq_notify(r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f00000001c0)={{0x7f, 0x1}, {0x2, 0x3f}, 0x1, 0x6}) mq_notify(r5, 0x0) renameat(r2, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r4}) 22:20:34 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000027000)={0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/102400, 0x37}], 0x1, 0x0) [ 565.692156][ C1] sd 0:0:1:0: [sg0] tag#1732 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 565.703449][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB: Test Unit Ready [ 565.710438][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.721027][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.731539][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.741957][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.752107][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.762375][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.772528][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.782894][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.793552][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.803840][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.813780][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.824070][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:34 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/102400, 0x37}], 0x1, 0x0) [ 565.835794][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.846081][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.856287][ C1] sd 0:0:1:0: [sg0] tag#1732 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x7c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x7c}}, 0x0) 22:20:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) listen(r0, 0x7b) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r2, 0x11}, 0x10) 22:20:35 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28) 22:20:35 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000027000)={0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/102400, 0x37}], 0x1, 0x0) 22:20:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0xffffffffffffff7f, 0x3}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:20:35 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:35 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x840000000002, 0x3, 0x200000000000ff) socket$unix(0x1, 0x1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180), 0x4) connect$inet(r4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) accept(r0, &(0x7f0000001b80)=@xdp, &(0x7f0000001c00)=0xfffffffffffffe5f) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x14006081) getsockname(r3, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0x8, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000002c0)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) 22:20:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 22:20:35 executing program 3: 22:20:35 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x24000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x80000001, @mcast1, 0x2}}, 0x0, 0x0, 0x2f, 0x0, "b05691dc81f9123fef784bb2eca0e714f3d4d3df42217758f5f38f72f3d39965b00835fb207b80cd353b6348fced0b5a10d3330d1783285af2066d18864749a9e92a3ded6d917ae22ba252d87c0f0403"}, 0xd8) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0xffffffffffffffb0, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_PROBES={0x5}]}]}, 0x64}}, 0x0) 22:20:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4940, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000200)={@initdev}, &(0x7f0000000380)=0xc) r3 = open(&(0x7f0000000140)='./file0\x00', 0x401, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x100, 0x3f, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xc6e}, @L2TP_ATTR_DEBUG={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x24000000) 22:20:36 executing program 4: 22:20:36 executing program 5: [ 567.090003][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:36 executing program 3: [ 567.181133][T15155] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:36 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:36 executing program 4: 22:20:36 executing program 5: 22:20:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[]}}, 0x24004004) 22:20:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x60}}, 0x20008015) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4008085) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x6c7e, 0x2, 0x2, 0x1, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 22:20:36 executing program 3: 22:20:36 executing program 5: 22:20:36 executing program 4: 22:20:36 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x85, @mcast1, 0x69}, {0xa, 0x4e20, 0x80000000, @mcast1}, 0x101, [0x8, 0x6, 0x5, 0x10000, 0x1f, 0x3f, 0x101, 0x102c7e03]}, 0x5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020e010000000000000000000000000016000340686173686e65742c706f72742c6e657400000005000400000000000900020073797a310000000005000500020000000500010014000780080012400000000008001300"/100], 0x64}}, 0x0) 22:20:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000002060100ff000000000000000000000016000300686173683a6e65742c706f72742c6e657400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800184000000000"], 0x64}}, 0x0) 22:20:37 executing program 3: 22:20:37 executing program 4: [ 568.028378][T15189] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:37 executing program 5: 22:20:37 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000140)={[0x1000, 0x2000, 0x3000], 0x3ff, 0x13, 0x6e}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe0000000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x20}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xea41}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x404c000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) r3 = fcntl$getown(r2, 0x9) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000340)=0x5, 0x4) ptrace$pokeuser(0x6, r3, 0x1f, 0x7) 22:20:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}}, 0x0) 22:20:37 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x1000, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 22:20:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0xedc0) accept4$alg(r2, 0x0, 0x0, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000000)) 22:20:37 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) ioctl$TUNSETQUEUE(r0, 0x5452, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$tipc(0x0) 22:20:37 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:37 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) 22:20:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'stack ', 'em1bdev\x00'}, 0xe) [ 568.911230][ C1] sd 0:0:1:0: [sg0] tag#1733 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 568.922727][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB: Test Unit Ready [ 568.930156][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.940901][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.952118][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.962834][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.974001][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.985261][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.997776][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.008602][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.019327][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.030374][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.041069][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:38 executing program 4: getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f0000000240)=""/179, 0xb3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x1, 0x0, 0x0, 0x20, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}, 0x104c8, 0xff, 0x0, 0x4, 0x8, 0xffffff07, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x1) dup(0xffffffffffffffff) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readv(r0, &(0x7f00000001c0)=[{0x0}], 0x1) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 569.052625][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.063400][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.075168][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.086860][ C1] sd 0:0:1:0: [sg0] tag#1733 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000002060100000000000000000000000000160003fc676173683a6e65742c706f72742c6e65740000000500146a31000001000500050002000000050001000600000014000780080012400000000008862cbc2e00"/100], 0x64}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000045) 22:20:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1000, &(0x7f0000000080)=0x0) io_destroy(r0) creat(0x0, 0x0) 22:20:38 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x53}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4200, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xe58, 0x109800) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) [ 569.318833][T15239] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.374072][T15239] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:38 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x1000, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x300}]) [ 569.579677][ C1] sd 0:0:1:0: [sg0] tag#1734 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.592636][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB: Test Unit Ready [ 569.599829][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.611644][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.622936][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.633741][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.645964][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.657303][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.669281][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.679707][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.690818][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.702458][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.715129][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:38 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa4, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x54}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_PROBES={0x30, 0x15, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0xa4}}, 0x0) 22:20:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/50) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x110) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) semget(0x2, 0x0, 0x2c0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 22:20:38 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/50) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x110) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) semget(0x2, 0x0, 0x2c0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}}, {{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000300)=""/37, 0x25}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/43, 0x2b}], 0x1, &(0x7f0000002a00)=""/4099, 0x1003}, 0x3ff}], 0x3, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) [ 569.725919][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.737286][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.748713][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.760196][ C1] sd 0:0:1:0: [sg0] tag#1734 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:39 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x80, 0xba}, &(0x7f0000000280)=0xc) close(r0) waitid$P_PIDFD(0x3, r0, &(0x7f00000002c0), 0x2, &(0x7f0000000340)) mq_notify(r0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0x439) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) 22:20:39 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:39 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/157, 0x9d}], 0x1) [ 570.142897][ C0] sd 0:0:1:0: [sg0] tag#1735 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.156280][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB: Test Unit Ready [ 570.163795][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.174483][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.185841][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.196310][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.207262][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.218269][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.229088][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.243718][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.254380][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.265301][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.276603][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.290238][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.301386][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.312421][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.323495][ C0] sd 0:0:1:0: [sg0] tag#1735 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/226, 0xe2) 22:20:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x3f, 0x4e24, 0x2, 0x2, 0x20, 0x80, 0xc, r3, r4}, {0x1, 0x3, 0x0, 0x1, 0xfffffffffffffeff, 0x401, 0x3, 0x8}, {0xfffffffffffffffb, 0x6, 0x2, 0x8}, 0xa92, 0x0, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x4d2, 0x6c}, 0x2, @in6=@empty, 0x3505, 0x2, 0x3, 0x9, 0x14, 0x3511bfe0, 0x7}}, 0xe8) 22:20:39 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:39 executing program 4: getxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.impure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:20:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000081) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) [ 570.847910][ C1] sd 0:0:1:0: [sg0] tag#1736 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.860176][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB: Test Unit Ready [ 570.868771][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.880684][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.892595][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.903651][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.915467][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.927723][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.938715][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.950230][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.960843][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.973134][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.985249][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.996640][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.007825][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.018735][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.029977][ C1] sd 0:0:1:0: [sg0] tag#1736 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:40 executing program 5: 22:20:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELRULE={0x110, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xd3, 0x7, 0x1, 0x0, "7a19899c892310211765af0d44692d84dfb8393604bab688a529f435e43d85cc0b83187efbade4539a7624f5b6e5253a3e495795abaa67441924ba95e257aae7d687ee1686b8d74951e885cff4fd4373720a0e784135523b15f18981fdada1d3c273bd9ae7064a95a4fc8b2f7798a27300956c3e713de0ad2b116ee57b709079a5d61d8b95bc35e4ca71067f2672bbc5373cfb44abbdbfcd060f4fb994a580adb7d74c6a65a15baac8b1d577edcd87053921ff169fefe4772db07886c58b388ab2a5d418da31d540aeda803132ca16"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}]}], {0x14}}, 0x170}, 0x1, 0x0, 0x0, 0x1}, 0x40008) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) 22:20:40 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @dev}, @sco, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) ioctl$TUNSETQUEUE(r1, 0x5452, &(0x7f0000000100)={'vcan0\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x1, 0x81, 0x6, 0x2, 0x0, 0xfff, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6c, 0x4, @perf_config_ext={0x4, 0x2000080}, 0x44000, 0x100000000, 0x4, 0x6, 0xff800000, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x6, 0x59, 0xff, 0x9, 0x0, 0x0, 0xa828, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp, 0x8024, 0x8, 0x3, 0x4, 0x5, 0xfffffff9}, r2, 0x10, r3, 0xa) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) ioctl$TUNSETQUEUE(r4, 0x5452, &(0x7f0000000100)={'vcan0\x00'}) recvmmsg(r4, &(0x7f0000001d40)=[{{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f00000014c0)=""/190, 0xbe}], 0x5, &(0x7f0000001580)=""/200, 0xc8}, 0xffffffa7}, {{&(0x7f0000001680)=@vsock, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001700)=""/186, 0xba}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000017c0)=""/214, 0xd6}, {&(0x7f00000018c0)=""/95, 0x5f}, {&(0x7f0000001940)=""/253, 0xfd}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/218, 0xda}], 0x7, &(0x7f0000001c40)=""/209, 0xd1}, 0x4}], 0x2, 0x10000, &(0x7f0000001d80)={0x77359400}) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x1c, r6, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x80040) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080025bd70007cdbdf25010000000000432740050000001c001810000008ff7f000000000000765f736c6176655fcc41a7b25b7e5515e230ba678630000000"], 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:20:40 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROBES={0x5, 0x15, 0xa7}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x7ff}}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x81}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x50000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}]}, 0x54}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x90) close(r1) mq_notify(r1, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) 22:20:40 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000002c0)=""/18) [ 571.264754][ C1] sd 0:0:1:0: [sg0] tag#1737 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 571.276520][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB: Test Unit Ready [ 571.283797][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.294236][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.304766][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.315520][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.315623][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.315725][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.315833][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:40 executing program 3: [ 571.315941][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.316051][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.316155][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.316357][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.398893][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:40 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) sendto$unix(r0, &(0x7f00000010c0)="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", 0x1000, 0xad463ab80841c41a, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mq_notify(r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x612, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000088}, 0x40004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0xc) writev(r7, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) dup2(r3, r7) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$SOUND_MIXER_INFO(r8, 0x805c4d65, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) [ 571.399007][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x208800, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x78, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc3}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) 22:20:40 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 571.399120][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:40 executing program 5: [ 571.399232][ C1] sd 0:0:1:0: [sg0] tag#1737 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:40 executing program 3: 22:20:40 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 571.901289][ C1] sd 0:0:1:0: [sg0] tag#1738 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 571.912662][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB: Test Unit Ready [ 571.919454][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.929843][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.940935][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.951722][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.963583][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.973811][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.984197][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.995483][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.005871][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.016368][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.016653][ C0] sd 0:0:1:0: [sg0] tag#1739 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 572.026681][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.037838][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB: Test Unit Ready [ 572.048426][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.055462][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.065508][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.075703][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x68}}, 0x4044850) [ 572.085963][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.096266][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.106994][ C1] sd 0:0:1:0: [sg0] tag#1738 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.117366][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.136965][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.146983][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.158415][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.170428][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.181115][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.191645][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.201590][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.212409][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.222782][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.233677][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.243939][ C0] sd 0:0:1:0: [sg0] tag#1739 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:41 executing program 5: 22:20:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f00000000c0)="5e3656ee9c670ea4398fd7f2d3736f8c87db4ea350ee9a017baab7139100ea9c4a9aff4c379f26bc7e5461fe41503142744bbaa258453b88bdaf83a21f197d92389055f635062d37def08f5b3662bf97890e45e876b81e515f8d95227483cf", 0x5f) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016000300686173683a6e00742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800084000000000"], 0x64}}, 0x0) 22:20:41 executing program 3: 22:20:41 executing program 2: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r2 = mq_open(&(0x7f0000000940)='eth0\x00\x04\xad\xbb\xcf\x88\x8a\xa0W\xcd\xfa\xed,\x007\rlg\xe20i\xf2\xdb\xc0\xcf8\xbf\xb9s4\xb4G\xb1\xfd5\x02\x94S\xd7\v0x0) r5 = socket$inet(0x2, 0x3, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, &(0x7f0000000040)) fstat(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={r4, 0x0, r6}, 0xc) r7 = getgid() setresgid(r0, r6, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400fc000206010000000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800130000000000"], 0x64}}, 0x0) 22:20:41 executing program 4: 22:20:41 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:41 executing program 5: 22:20:41 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200800, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) mq_notify(r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x4, @rand_addr="1e61149dcd1583a4a705648a7021892f", 0xa7}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x2b}, 0x1}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x7fff, @rand_addr="f7cf53d33e1127735882327cdef0ce38", 0xfffffff7}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x2e37}], 0xc0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) mq_notify(r3, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r0) write$rfkill(r1, &(0x7f0000000100)={0x8001, 0x9, 0x1, 0x1}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400faff010601000000000000e6ffffff0000011600032c6e6574000000050004000000000009000200255b7eaf77ee730500010006000000140007800822fee4846fa4b49de4001240000000000800084000"/101], 0x64}}, 0x0) [ 572.923537][ C1] sd 0:0:1:0: [sg0] tag#1740 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 572.934509][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB: Test Unit Ready [ 572.941315][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.951979][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.962300][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.973131][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.983165][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.994079][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.004792][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.014788][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.026661][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.037374][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.047986][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.059647][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016400300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800084000000000"], 0x64}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000140)=0x20, 0x8) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000180)=0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200040, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 22:20:42 executing program 3: [ 573.069925][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.081288][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.091941][ C1] sd 0:0:1:0: [sg0] tag#1740 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:42 executing program 4: 22:20:42 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x64}}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) recvfrom$phonet(r0, &(0x7f00000000c0)=""/120, 0x78, 0x2060, &(0x7f0000000140)={0x23, 0x81, 0x93, 0xa8}, 0x10) 22:20:42 executing program 5: [ 573.305946][T15382] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:42 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 573.386113][T15382] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:42 executing program 4: 22:20:42 executing program 3: clone(0x24800b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:20:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) [ 573.638446][ C0] sd 0:0:1:0: [sg0] tag#1741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 573.649619][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB: Test Unit Ready [ 573.656906][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.667556][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.677955][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.688176][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.698540][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.709152][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.719376][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.731297][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.743513][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.754719][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.766232][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:42 executing program 3: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x8d\xff\xff\xff\x00'}}) 22:20:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800082600000000"], 0x64}}, 0x0) [ 573.779127][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.790385][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.801793][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.813228][ C0] sd 0:0:1:0: [sg0] tag#1741 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007440)=[{0xffffff7f00000000, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)='d', 0x1}, {&(0x7f0000000000)="8d03341f54bd5213b1d478d88452c5edce6b439eb46adce6bb60af76a4f9c25b0cad2753bd81d8a7986bf3c14e4e357638027f1d26962e612fe14e22d829974360830ac95f8d3799a4b0678e5696638d04c55dc593aecb4bb271410d6f65d74407ca1adc51017d5fb711eab3e5efdc2bf3634af02b836486e3e50622472d110519e9c967f46ab83dbd2a1a215d5f71ce7505b1f9d7dfbb35cd47e057ce561333e7b3d59c9212faf5441ae2f047105ea160c01c9df6b6465feac0f1a957", 0xbd}], 0x2}], 0x4924924924925c0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="113e000200136560e400"}, 0x1c) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:20:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x12c82, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3f, 0x8000, 0xdb, 0x10000, 0x5, 0x8, 0x5}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800363b00000000"], 0x64}}, 0x0) 22:20:43 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 574.246114][ C0] sd 0:0:1:0: [sg0] tag#1742 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 574.259514][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB: Test Unit Ready [ 574.268227][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.278694][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.290844][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.301534][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.312338][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.323718][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.335278][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.346902][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.357993][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.369287][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.380030][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002063382fdc0000000000000000000000c000300686173683a697000050000d907eab57ec05c36fb7390a3151cb000ca0500010006000000140007800800000000000000000000000000000000000000000000000067e9ce7bfde6989a6062101c687dfb856e29217e9affb1dfe7c1f1c4a14951fa1869fae04279bde2f4d26a74a114d78970dd25d4da646b389978a1089560dfd841cb312b716ec0184504bdb99b4235382fe451e8a66622e1f407f5e5"], 0x58}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000000)=0x4) 22:20:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}]}, 0x5c}}, 0x0) 22:20:43 executing program 5: 22:20:43 executing program 3: [ 574.391816][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.403079][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.413957][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.425411][ C0] sd 0:0:1:0: [sg0] tag#1742 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)={0x3a, 0x5, 0x8001}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40600, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)=""/199, &(0x7f0000000340)=0xc7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016005da03f86548ba8056e0300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a31000000000500a31d1b0100000500010006000000140007800800124000000000080008400000000082c76433973f18aa135c69a01ac9f6211d6f22e3b2ac6f37920639824ace50b10b9ff4dfeaef2478ff3fabbd5dd7ce50c421050aca206ee4807cd5cc3f199ec286e83e27b850f94252119853e34d84b60c30b0656bfaf3b23ef68cc377d40baaf47281f898d0e93d7873efe3b053000640"], 0x64}}, 0x0) [ 574.549095][T15433] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 574.575067][T15433] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:43 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2a080, 0x93) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000000000016000300686173683a6e65742c706f72742c6e65740000000500040043b8fd4ab54ec86973797a3100000000050005000200000005000100060000001400078008001240000000000800130000000000"], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r2, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x117}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r8) mq_notify(r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', r13}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30002000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xb16, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) [ 574.712230][T15442] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:43 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:43 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) mq_notify(r0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x1000000, 0x6, {0x77359400}, {0x4, 0x2, 0xa1, 0x72, 0x80, 0xfa, 'q>D\\'}, 0x9, 0x1, @fd, 0x29, 0x0, r1}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@empty, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4, 0x4, 0x1, 0x400, 0x1, 0x80000000, r3}) [ 574.784793][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:43 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x6800) close(r0) [ 574.912853][T15445] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 574.987727][ C1] sd 0:0:1:0: [sg0] tag#1743 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 574.998564][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB: Test Unit Ready [ 575.005424][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.015502][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.025353][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.035322][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.045176][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.055184][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.065062][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.066767][T15445] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 575.075047][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.075151][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.102866][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.112882][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.122807][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.132705][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.142647][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.152531][ C1] sd 0:0:1:0: [sg0] tag#1743 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.239630][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00', {}, 0x0, [], [], [], [0x9890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:20:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd4c, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:20:44 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000070000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a31d165a5a3050005000200000005000100060000001400078008001240000000000800084000000000000000"], 0x64}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'macvtap0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}) 22:20:44 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395544) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000440), 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x27) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x236800, 0x0) socketpair(0x3a, 0x1, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f0000000340)=""/148, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r6, 0x800454d2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x3bc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:20:44 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 575.525540][T15476] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 575.537644][ C0] sd 0:0:1:0: [sg0] tag#1744 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 575.538314][T15472] input: syz1 as /devices/virtual/input/input16 [ 575.548401][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB: Test Unit Ready [ 575.561483][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.571346][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.581162][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.591044][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.600859][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.610684][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.620481][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.630291][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.640150][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.642023][T15478] input: syz1 as /devices/virtual/input/input17 [ 575.649983][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.650105][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.675890][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.685802][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.695680][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.705479][ C0] sd 0:0:1:0: [sg0] tag#1744 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:44 executing program 0: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 575.772942][T15481] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000200)={0x0, "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"}) [ 576.012807][T15472] input: syz1 as /devices/virtual/input/input18 22:20:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010000000000000000000180000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a3100000000050005000200000005000100060000001400078008001240000000000800084000000000"], 0x64}}, 0x0) [ 576.065987][ C1] sd 0:0:1:0: [sg0] tag#1745 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 576.077618][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB: Test Unit Ready [ 576.084404][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.094357][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 576.094463][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:45 executing program 0: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 576.094591][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.094702][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.094809][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.094920][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095028][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095135][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095252][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095363][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095469][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095581][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095691][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.095796][ C1] sd 0:0:1:0: [sg0] tag#1745 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.198731][T15478] input: syz1 as /devices/virtual/input/input19 [ 576.430167][ C1] sd 0:0:1:0: [sg0] tag#1746 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 576.539416][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB: Test Unit Ready [ 576.539533][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.539644][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.539750][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.539863][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.539972][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.540138][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.606198][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.616100][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.626088][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.636165][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.646006][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.655899][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.665753][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) mq_notify(r1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}, @fwd={0xe}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @ptr={0xd, 0x0, 0x0, 0x2, 0x80000002}, @typedef={0xff7fffff, 0x0, 0x0, 0x8, 0x1}, @enum={0x10000007, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x7}, {0x1, 0x5}, {0x9, 0x8000}, {0xd, 0x7}, {0x3}, {0xb}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @func={0xc, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e]}}, &(0x7f0000000200)=""/114, 0xc5, 0x72, 0x1}, 0x20) 22:20:45 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001180)) [ 576.675662][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.685683][ C1] sd 0:0:1:0: [sg0] tag#1746 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:45 executing program 0: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/166, 0xa6}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 577.026187][ C0] sd 0:0:1:0: [sg0] tag#1747 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 577.036886][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB: Test Unit Ready [ 577.043623][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.053449][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.063205][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.073217][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.083049][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.092926][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.102893][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.112716][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.122534][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.132371][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.142348][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.152173][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.162016][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d00050727bd7000ee120b4b4b06b4d2", @ANYRES32=r3, @ANYBLOB="0000000000000000180034801400350076657468305f746f5f62617461647600"], 0x38}}, 0x0) [ 577.171969][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.181995][ C0] sd 0:0:1:0: [sg0] tag#1747 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x1, 0x5}]}, 0xc, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206011e000000000000000000000000160083683a6e65742c706f72742c6e657400000005000476d46ee7000900020073797a310000000005ec0fcfbfa8a32fe568db61bc982305000200000005000100060000001400078008001240000000000800130000000000284700c6f6c5740f41824ee7867a597a2b528f1cc4b441faef7adb0cc25c4eddf29e996c91d7a3f7399c3ba71c04a81000"/175], 0x64}}, 0x0) r1 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/178) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x484080, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000000000000c00080001000000000000000c0008006c000000000000000c000200f52c2f74000000000c00060000a666414e000000000000050100000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) mq_notify(r7, 0x0) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x20200, 0x94) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/qat_adf_ctl\x00', 0x200a00, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x61708eb2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) 22:20:46 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) 22:20:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) dup2(r4, r2) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r5 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x1, 0x10000) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x64}}, 0x0) [ 577.409676][T15531] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 577.443236][ C0] sd 0:0:1:0: [sg0] tag#1748 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 577.454024][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB: Test Unit Ready [ 577.460716][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.470529][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.480534][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.490734][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.500581][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.510406][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.520341][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.522204][T15540] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 577.530172][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.530281][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:20:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d00050727bd7000ee120b4b4b06b4d2", @ANYRES32=r3, @ANYBLOB="0000000000000000180034801400350076657468305f746f5f62617461647600"], 0x38}}, 0x0) [ 577.530381][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.569014][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.578923][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.588738][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.598585][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.608409][ C0] sd 0:0:1:0: [sg0] tag#1748 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 22:20:46 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d473b0b3806be4e017bbb0545503ffff633b27e59aa144175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe330cf860cf124d7ad35bf6e5d1e380812d274014ae40b8ae963b23e340c4ad37b9d2bd39824d36311293cf245896e08c0e1e16c82f39d8ed6e9a309ca70f3f742c16396195b5802b5e6cb43b6e9f6b16352e0af194d5b249cb1e0db82ef06871cf83d93994977fc8fe185a42bd2d3824232184dd068fd023c1b82c85743be41cfc16e453bfdc41abfd5af959b17434a00e0ce606e5313e1e"], 0x82) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fe9000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(r2) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) [ 577.769664][ C0] sd 0:0:1:0: [sg0] tag#1749 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 577.780514][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB: Test Unit Ready [ 577.787334][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.797168][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.807133][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.817103][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.826944][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.836883][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.846976][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.856933][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.866744][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.876657][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.886534][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.896384][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.906321][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.916565][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.926542][ C0] sd 0:0:1:0: [sg0] tag#1749 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.941848][ T737] ===================================================== [ 577.948877][ T737] BUG: KMSAN: use-after-free in veth_xmit+0x2da/0xb70 [ 577.955653][ T737] CPU: 1 PID: 737 Comm: kworker/u4:30 Not tainted 5.6.0-rc2-syzkaller #0 [ 577.964095][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.974183][ T737] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 577.982083][ T737] Call Trace: [ 577.985394][ T737] dump_stack+0x1c9/0x220 [ 577.989856][ T737] kmsan_report+0xf7/0x1e0 [ 577.994294][ T737] __msan_warning+0x58/0xa0 [ 577.998823][ T737] veth_xmit+0x2da/0xb70 [ 578.003094][ T737] ? veth_close+0x160/0x160 [ 578.007710][ T737] dev_hard_start_xmit+0x531/0xab0 [ 578.012982][ T737] ? kmsan_get_metadata+0x11d/0x180 [ 578.018213][ T737] __dev_queue_xmit+0x37de/0x4220 [ 578.023267][ T737] ? kmsan_get_metadata+0x11d/0x180 [ 578.028501][ T737] dev_queue_xmit+0x4b/0x60 [ 578.033042][ T737] batadv_send_skb_packet+0x59b/0x8c0 [ 578.038449][ T737] batadv_send_broadcast_skb+0x76/0x90 [ 578.043980][ T737] batadv_iv_send_outstanding_bat_ogm_packet+0x97e/0xd50 [ 578.051063][ T737] ? batadv_iv_ogm_queue_add+0x1900/0x1900 [ 578.057665][ T737] process_one_work+0x1555/0x1f40 [ 578.062736][ T737] worker_thread+0xef6/0x2450 [ 578.067445][ T737] kthread+0x4b5/0x4f0 [ 578.071507][ T737] ? process_one_work+0x1f40/0x1f40 [ 578.076714][ T737] ? kthread_blkcg+0xf0/0xf0 [ 578.081305][ T737] ret_from_fork+0x35/0x40 [ 578.085728][ T737] [ 578.088052][ T737] Uninit was created at: [ 578.092395][ T737] kmsan_internal_poison_shadow+0x66/0xd0 [ 578.098128][ T737] kmsan_slab_free+0x6e/0xb0 [ 578.102737][ T737] kfree+0x565/0x30a0 [ 578.106721][ T737] netdev_name_node_alt_destroy+0x587/0x690 [ 578.112618][ T737] rtnl_linkprop+0x939/0xc00 [ 578.117291][ T737] rtnl_dellinkprop+0x9d/0xb0 [ 578.121974][ T737] rtnetlink_rcv_msg+0x1153/0x1570 [ 578.127081][ T737] netlink_rcv_skb+0x451/0x650 [ 578.131856][ T737] rtnetlink_rcv+0x50/0x60 [ 578.136264][ T737] netlink_unicast+0xf9e/0x1100 [ 578.141118][ T737] netlink_sendmsg+0x1246/0x14d0 [ 578.146062][ T737] ____sys_sendmsg+0x12b6/0x1350 [ 578.151006][ T737] __sys_sendmsg+0x451/0x5f0 [ 578.155619][ T737] __se_sys_sendmsg+0x97/0xb0 [ 578.160297][ T737] __x64_sys_sendmsg+0x4a/0x70 [ 578.165077][ T737] do_syscall_64+0xb8/0x160 [ 578.169695][ T737] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.175684][ T737] ===================================================== [ 578.182697][ T737] Disabling lock debugging due to kernel taint [ 578.188853][ T737] Kernel panic - not syncing: panic_on_warn set ... [ 578.195449][ T737] CPU: 1 PID: 737 Comm: kworker/u4:30 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 578.208475][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.218550][ T737] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 578.226383][ T737] Call Trace: [ 578.229692][ T737] dump_stack+0x1c9/0x220 [ 578.234046][ T737] panic+0x3d5/0xc3e [ 578.237970][ T737] kmsan_report+0x1df/0x1e0 [ 578.242498][ T737] __msan_warning+0x58/0xa0 [ 578.247001][ T737] veth_xmit+0x2da/0xb70 [ 578.251263][ T737] ? veth_close+0x160/0x160 [ 578.255776][ T737] dev_hard_start_xmit+0x531/0xab0 [ 578.260909][ T737] ? kmsan_get_metadata+0x11d/0x180 [ 578.266126][ T737] __dev_queue_xmit+0x37de/0x4220 [ 578.271156][ T737] ? kmsan_get_metadata+0x11d/0x180 [ 578.276400][ T737] dev_queue_xmit+0x4b/0x60 [ 578.280914][ T737] batadv_send_skb_packet+0x59b/0x8c0 [ 578.286342][ T737] batadv_send_broadcast_skb+0x76/0x90 [ 578.291822][ T737] batadv_iv_send_outstanding_bat_ogm_packet+0x97e/0xd50 [ 578.298964][ T737] ? batadv_iv_ogm_queue_add+0x1900/0x1900 [ 578.304776][ T737] process_one_work+0x1555/0x1f40 [ 578.309828][ T737] worker_thread+0xef6/0x2450 [ 578.314528][ T737] kthread+0x4b5/0x4f0 [ 578.318597][ T737] ? process_one_work+0x1f40/0x1f40 [ 578.323811][ T737] ? kthread_blkcg+0xf0/0xf0 [ 578.328410][ T737] ret_from_fork+0x35/0x40 [ 578.334181][ T737] Kernel Offset: 0x1c600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 578.345814][ T737] Rebooting in 86400 seconds..