[ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2020/08/26 07:37:10 fuzzer started 2020/08/26 07:37:11 dialing manager at 10.128.0.26:35225 2020/08/26 07:37:11 syscalls: 3161 2020/08/26 07:37:11 code coverage: enabled 2020/08/26 07:37:11 comparison tracing: enabled 2020/08/26 07:37:11 extra coverage: enabled 2020/08/26 07:37:11 setuid sandbox: enabled 2020/08/26 07:37:11 namespace sandbox: enabled 2020/08/26 07:37:11 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/26 07:37:11 fault injection: enabled 2020/08/26 07:37:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/26 07:37:11 net packet injection: enabled 2020/08/26 07:37:11 net device setup: enabled 2020/08/26 07:37:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/26 07:37:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/26 07:37:11 USB emulation: enabled 2020/08/26 07:37:11 hci packet injection: enabled 07:41:41 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8903, 0x0) syzkaller login: [ 415.538151][ T8482] IPVS: ftp: loaded support on port[0] = 21 [ 415.959868][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 416.089874][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.098525][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.108484][ T8482] device bridge_slave_0 entered promiscuous mode [ 416.128386][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.136194][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.145696][ T8482] device bridge_slave_1 entered promiscuous mode [ 416.198047][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.215618][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.267454][ T8482] team0: Port device team_slave_0 added [ 416.285164][ T8482] team0: Port device team_slave_1 added [ 416.333242][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.340632][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.366762][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.388918][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.396514][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.423689][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.484082][ T8482] device hsr_slave_0 entered promiscuous mode [ 416.494438][ T8482] device hsr_slave_1 entered promiscuous mode [ 416.769059][ T8482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.787173][ T8482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.806709][ T8482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.824861][ T8482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.136568][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.172010][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.181739][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.202082][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.225094][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 417.236112][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.245603][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.252922][ T8647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.300141][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 417.309886][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.320152][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.329604][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.336965][ T8647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.346125][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 417.357114][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 417.377643][ T8647] Bluetooth: hci0: command 0x0409 tx timeout [ 417.384964][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 417.395553][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.408438][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.429185][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 417.439139][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.479442][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.489350][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.499782][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.509890][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.529916][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.594691][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.602498][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.638632][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.707217][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.717479][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.780833][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.790815][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.813273][ T8482] device veth0_vlan entered promiscuous mode [ 417.824871][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.834536][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.868546][ T8482] device veth1_vlan entered promiscuous mode [ 417.944704][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 417.955036][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 417.979483][ T8482] device veth0_macvtap entered promiscuous mode [ 417.992798][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.003069][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.017304][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.034223][ T8482] device veth1_macvtap entered promiscuous mode [ 418.095835][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.103952][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.113459][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.123789][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.146699][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.185447][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 418.195577][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:41:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5421, 0x0) 07:41:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0xffffff7d, 0x4) 07:41:46 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff1000/0xf000)=nil, 0x0) 07:41:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0/file0\x00'}, 0x6e) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0/file0\x00'}, 0x6e) 07:41:46 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0305616, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "95d7de8f"}, 0x0, 0x0, @planes=0x0}) [ 419.396243][ T8695] Bluetooth: hci0: command 0x041b tx timeout 07:41:46 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7ff, 0x74c}, 0x810, 0x8, 0x800c31e, 0x3, 0x4000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x9, 0x2, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1a3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x80000001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x4, 0x7fff}, &(0x7f00000002c0)=0x8) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) sendmsg$sock(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="a861f441c207cd2d3bc943449a25df7a679569e9", 0x14}, {&(0x7f0000000100)="8b30148449830c53c9418b93a45941d130bd08e65733e1d5f717b7422191ecb58416d4a8c079ee9e8f9d48f1a7f5b1fa9def4a4446857ba93b8119db8d260dfad00ae1cf542f1b9b7c9e128d63c80f8e9c1e17", 0x53}, {&(0x7f0000000300)="afaa32217477dedb838f197609d058255218c9dc964c5e7c2dc886fe09d8808b8cbcad396924eed3f58f6a60a961d7ea5a7d672e827ad674a9abb2680075929f74b578920b9664cf3d8fe981fd6120321e9db83a2fa22f8d8b33a5bc7d2f8b63d604a727f9d62117d4c9ee58f483edfaba87b423c9e27a8ff27bbcd2173b4eea50b2f21b731bcc19ed54ba80c5090c88112bccafe5099b339258600519d5bfc371393a145fe35e9b4f2fc7dce50c6f5b4fd0950bb57ac019ac06d8ac0e57ee9874deda4d165a738d6744c788271a88fc9222e4f65419c2", 0xd7}, {&(0x7f0000000580)="dd070a7bb5e99162b1fa8d53a19c282d86b518f9647dd3ae60fc52819569bdcbaf44984b486271d43d26d877e8af454796e2d9398dfc4aa0cd840627bbc02efdd079f838b4cebd3e52ad4a3720c0f35d76234772b364d4259a4e5ab3261679776b6d0a", 0x63}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000600)="89c03bee7495c950d68bb2f1cfe0c25d11305a92f9d2de9414abd8fcdd0f7cf5c251f026658b28b00f9fbd3850f067d955f5e568369d8a1ef54ad9d4a1b1b32b5af7fec95d997ef26fb83c06384c14464c523f32a6d289db73919ee7bc5722e11ad878059e2c469bf396c65e76947d96870b71deff2765ac082f28ac26b7e8d4f79cd8a8f802d8d07ad16310e4a4010448a5a3a5a14a510324205e33c9d8b7c4a008072ba342a8bc644166d637f1a9dae6a21980ca98d58792169e1261c75f044dc3dec514a67ee77fff8bfea644a94467c90ffa434109e22571e5956887ac2bee2985bedbb02f8ada8689ebcceab77788788836", 0xf4}], 0x6, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x4000) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {r5, 0x3, "547380", "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"}}, 0x110) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vcs\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) [ 419.616325][ C1] sd 0:0:1:0: [sg0] tag#5790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 419.627067][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB: Test Unit Ready [ 419.633897][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.643808][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.653734][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.663700][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.673657][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.683639][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.693633][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.703617][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.713590][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.723392][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.733317][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.743323][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.753235][ C1] sd 0:0:1:0: [sg0] tag#5790 CDB[c0]: 00 00 00 00 00 00 00 00 07:41:47 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000cd7b40490b4f06fed10102030109021200010000138f984a0000006a320d00157261df0e8ab62201d2dcd9dd9aa846e1682f93573a709e2b5b6af4051fa2fc066e6c09c48c670039b8b21d5fa9444dad1ef34b4001d7c59b30843e850b281663c60aaf4e9443c9012f47ac6ac2d69e2a9d2c1d4ea16845f39d8c5b939571502e9f61202919a15558319223e02a183118c8bc4ad027f990918852f7b161326c6e57efac2b293144a28fe21d71aa685aacd5bfc845140f05654291376ab13f21f85e7d27e4dd2e576a6d212e56b46b98a2210e46a04cd7341c503fa7d22b"], 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2181c0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1000, 0x2, 0x4}) [ 420.413808][ T8695] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 420.803920][ T8695] usb 1-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 420.814676][ T8695] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.987696][ T8695] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d1.fe [ 420.997721][ T8695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.006021][ T8695] usb 1-1: Product: syz [ 421.010321][ T8695] usb 1-1: Manufacturer: syz [ 421.015088][ T8695] usb 1-1: SerialNumber: syz [ 421.028273][ T8695] usb 1-1: config 0 descriptor?? [ 421.295586][ T8697] usb 1-1: USB disconnect, device number 2 [ 421.474284][ T8695] Bluetooth: hci0: command 0x040f tx timeout [ 422.073726][ T8695] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 422.444957][ T8695] usb 1-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 422.455547][ T8695] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 07:41:49 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x508, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="b866b2f120f4"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'ip6tnl0\x00', {0x2, 0x4e20, @remote}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x144c2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x98, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x9, @private0, 0xe17}, @in6={0xa, 0x4e24, 0xe24, @mcast2, 0x80000001}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f00000002c0)=0x10) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3f7, 0x20, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f6bf698}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x796bdae5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd39d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa1fdbd7}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb71f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a3fac2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57ff3309}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x1, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xf1da5772f4031981) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x80) move_mount(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', r1, &(0x7f0000000880)='./file0\x00', 0x17) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000008c0)={0x2, 0x70, 0xf1, 0xaa, 0x4, 0x20, 0x0, 0x4, 0x240, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xcb2f, 0x3}, 0x0, 0xa60a, 0x1, 0x4, 0xfff, 0x0, 0xd0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x40, 0x8, 0xffffffff, 0x20, {{0x1e, 0x4, 0x1, 0x6, 0x78, 0x64, 0x0, 0x3f, 0x4, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp={0x44, 0x14, 0x6d, 0x0, 0x7, [0xa2, 0x3a, 0x0, 0x8]}, @end, @lsrr={0x83, 0xb, 0x11, [@multicast2, @rand_addr=0x64010100]}, @end, @timestamp_addr={0x44, 0x3c, 0x11, 0x1, 0x9, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}, {@private=0xa010100, 0x2}, {@local}, {@remote, 0x5e}, {@private=0xa010102, 0x7}]}, @rr={0x7, 0x7, 0xa6, [@local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0x2, 0x0, 0x12, @empty, @mcast1, 0x80, 0x700, 0xffffffff, 0x3}}) accept4$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000bc0)=0x14, 0x80000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000d40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe8, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044080}, 0x1) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/capi/capi20ncci\x00', 0x80040, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000fc0)={&(0x7f0000000d80), &(0x7f0000000dc0)=""/59, &(0x7f0000000e00)="6d9c503973d4e2a45ea6d5c58a25fc42a9a1b925a3d2a6f9eaeb7f4d6dc51894d36b453dd8b1d2e99bfcb1a454e68bb01e36348c537225b24f090bef43c22391b9e7f4a0036dbec311d46902c275ce3f1c37be01de8171e91ce926ca89d844325d474b8505cc8d40b89766755a982c3a152bd069c6fb4b1fa0e73d0a350b38eb4d44", &(0x7f0000000ec0)="c0ed080c932020d9872f7bbe7cb402ab8934ecebc0c0a49d9740f1619a7b85033f88cab1f3a17fb9b3baf1b37370cef13319d9a1989b39d7c6b8907d0b35e900078a7523d7728d3b9cab2f12ae90c8a35c7fe67113a757767b9403452702024b6bf647729f6dee2e49dcc86133c11fd8f9416e8be08c295f36ffa05d536a72948c671c52ff1c4258db9962597625b0053b285ab5391bd08cfd4acdaa90e52d836227da5b306bdf163fb34cf756bcf9371c2ec4f54a5dcd3b5ea65f2d58313f", 0x9, r7}, 0x38) [ 422.645131][ T8695] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d1.fe [ 422.654443][ T8695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.662525][ T8695] usb 1-1: Product: syz [ 422.667042][ T8695] usb 1-1: Manufacturer: syz [ 422.671724][ T8695] usb 1-1: SerialNumber: syz [ 422.729984][ T8695] usb 1-1: config 0 descriptor?? [ 423.003932][ T8695] usb 1-1: USB disconnect, device number 3 07:41:50 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7fff, 0x200000) write$FUSE_DIRENT(r3, &(0x7f0000000180)={0x138, 0xfffffffffffffff5, 0x0, [{0x5, 0xff, 0x9, 0x8000, ':/(!:{]]-'}, {0x2, 0x3584, 0x0, 0x1}, {0x6, 0x401, 0x1, 0x2, '*'}, {0x6, 0x95c, 0x5, 0x4, '!+.-:'}, {0x0, 0x3f9d, 0xe, 0x2, '^@\'-$^,}&%($-$'}, {0x2, 0x934, 0x4, 0x7fff, ']::{'}, {0x6, 0x9, 0x1, 0x0, '%'}, {0x1, 0x99c, 0x1, 0x200, '['}, {0x0, 0x8000, 0x3, 0x6f42, '{&.'}]}, 0x138) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r2, 0x29, 0x1, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000580), 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 07:41:50 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7fff, 0x200000) write$FUSE_DIRENT(r3, &(0x7f0000000180)={0x138, 0xfffffffffffffff5, 0x0, [{0x5, 0xff, 0x9, 0x8000, ':/(!:{]]-'}, {0x2, 0x3584, 0x0, 0x1}, {0x6, 0x401, 0x1, 0x2, '*'}, {0x6, 0x95c, 0x5, 0x4, '!+.-:'}, {0x0, 0x3f9d, 0xe, 0x2, '^@\'-$^,}&%($-$'}, {0x2, 0x934, 0x4, 0x7fff, ']::{'}, {0x6, 0x9, 0x1, 0x0, '%'}, {0x1, 0x99c, 0x1, 0x200, '['}, {0x0, 0x8000, 0x3, 0x6f42, '{&.'}]}, 0x138) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r2, 0x29, 0x1, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000580), 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 07:41:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000140)={0x40, 0x10001, 0x5, 0x5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x3, [@fwd, @volatile, @ptr, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {0x0, 0x4}, {}, {}]}]}, {0x0, [0x0]}}, 0x0, 0xdb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) write(r0, &(0x7f0000000080)="240000001a005f3814f9f407000903018002200000000000000000000800020040000000", 0x24) [ 423.555077][ T8695] Bluetooth: hci0: command 0x0419 tx timeout [ 424.485629][ T8771] IPVS: ftp: loaded support on port[0] = 21 [ 424.992433][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 425.154107][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.161450][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.171804][ T8771] device bridge_slave_0 entered promiscuous mode [ 425.217575][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.225245][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.234770][ T8771] device bridge_slave_1 entered promiscuous mode [ 425.290115][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.313587][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.362779][ T8771] team0: Port device team_slave_0 added [ 425.377176][ T8771] team0: Port device team_slave_1 added [ 425.435157][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.442243][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.468879][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.493756][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.500838][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.527450][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.598477][ T8771] device hsr_slave_0 entered promiscuous mode [ 425.608462][ T8771] device hsr_slave_1 entered promiscuous mode [ 425.621740][ T8771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.629636][ T8771] Cannot create hsr debugfs directory [ 425.900449][ T8771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.937026][ T8771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.957237][ T8771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.976480][ T8771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.286901][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.321885][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.331578][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.352774][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.365679][ T8693] Bluetooth: hci1: command 0x0409 tx timeout [ 426.388749][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 426.399016][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.409549][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.416960][ T8693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.431155][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.452468][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 426.462531][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.472078][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.479627][ T8697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.538999][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.550171][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.561263][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.572229][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.628662][ T8771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.639224][ T8771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.659854][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.670164][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 07:41:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x301000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_dccp_int(r5, 0x21, 0x11, &(0x7f0000000000)=0xfffffff9, 0x4) dup3(r0, r1, 0x0) [ 426.680801][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.691306][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.701007][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.711546][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.721257][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.749200][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.834481][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.842193][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.884608][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.945867][ T8983] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 426.975015][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.985381][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.056724][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.070835][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.100274][ T8771] device veth0_vlan entered promiscuous mode [ 427.117048][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.128082][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 07:41:54 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit_group(0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="077b8b2081093731fd"], 0x48}}, 0x8041) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev}}) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 427.169214][ T8771] device veth1_vlan entered promiscuous mode 07:41:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75b5af3515ebf92a96cb7af632d9652a6bb0508f09f3f0c858ff89879bed0239760dbea613609356f461a278643128fb7b994151a9820930f43ce9de375f40815bd1d6b7880ab357f55f9e56", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='B0\x00\x00\n\x00', @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYBLOB="1000020000001500"], 0x5c, 0x2) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000002c0)="308ceb65386ab2aa8507828a1904cbb3f040faacffc8e90fef1aa322defc8b951e1f2d644f6ad37b1de583a0e6801ec41c081e4e501106a281c186", 0x3b) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x0, 0x5844, 0x1}, 0x40) [ 427.324423][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.334209][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 427.343754][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.354140][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.407210][ T8771] device veth0_macvtap entered promiscuous mode [ 427.451095][ T8771] device veth1_macvtap entered promiscuous mode [ 427.539429][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.550109][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.564715][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.582681][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.592458][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.601915][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.611878][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.645885][ C0] sd 0:0:1:0: [sg0] tag#5791 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 427.652556][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.656801][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB: Test Unit Ready [ 427.656924][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.668574][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.674166][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.687018][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.693872][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.714330][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.720642][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.730366][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.738491][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.756565][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.766455][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.776365][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.786340][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.796226][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.806105][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.816150][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.826096][ C0] sd 0:0:1:0: [sg0] tag#5791 CDB[c0]: 00 00 00 00 00 00 00 00 07:41:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r1, &(0x7f0000000700)="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", 0x15b) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000580)={0x90, 0x0, 0x3, {0x5, 0x1, 0x0, 0x80000001, 0xfffffffc}}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x5, 0x40, 0x20, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x80000000, 0x2}, 0x0, 0x0, 0x5570, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044094}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 428.232419][ C0] sd 0:0:1:0: [sg0] tag#5792 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 428.243199][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB: Test Unit Ready [ 428.249853][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.259699][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.269572][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.279603][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.289476][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.299311][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.309172][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.319041][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.328908][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.338823][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.348689][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.358533][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 428.368475][ C0] sd 0:0:1:0: [sg0] tag#5792 CDB[c0]: 00 00 00 00 00 00 00 00 [ 428.435076][ T12] Bluetooth: hci1: command 0x041b tx timeout 07:41:56 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x40, 0x100) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000000)) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)=[&(0x7f0000000280)='\\\\#(,\x00\xdd\xe6}N\x15\xd1\xc7@\xefq\x92y\\R{\x8d\xd8\xbd`bmW\xc2\x90\x7f\x93\nf\xa1\x17\xdd\x91\xfd']) 07:41:56 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000071100fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000000018907804000000000000000000000000000000f393e71ef086ad7ad94cd7a43100b1675d32a03bea3a3a29d280a0f01c6ffea6cac8d4d22401e824e2d5d3b7e68df783b34de7b935b69cddefe2170ccea0ba79a945c8a94736fe77626a70c7a6040b15a9bf5d703aca383a9af87a2db94a75658a9d"], 0x0) 07:41:56 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r1}, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0}}, 0xc009) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x5, {{0x5, 0x3, 0x2, 0x0, 0x10001, 0x9, {0x2, 0xfffffffffffffff8, 0x400, 0x0, 0x8, 0x6f, 0x8, 0xf61, 0x7ff, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x3f}}, {0x0, 0x2}}}, 0xa0) pkey_free(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 07:41:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000660001ff"], 0x2}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4bfdc, 0x0) [ 429.518853][ T9027] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 429.574081][ T9030] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.1'. [ 429.630308][ C1] hrtimer: interrupt took 131157 ns 07:41:57 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001880)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001600)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd875865534079d0397d48842098442400126f870", 0xea}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de04e35eb0265000000", 0x22}, {&(0x7f0000001480)="bdcc25945d5320762605855bdd50efbce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245f449afac154a6576a3d7f5591f30021d273f5d", 0x9e}, {&(0x7f0000000300)="cd96bdb578810f358b2aaaf2bacafe0e46d11b73fdeffa5726afc6a69f941fc2599736bb61d60c3c812d5418a5ea3ae461b9018b039a4f69e2fdb082765b01000000d10caad94fd56acc522d8ccc79457da8b9fd8a3c83e184d7ec12809c5ee6b6e151ac4607a4f00b038bb363c37a615b632f43ca51be02ce3be3138bd063ec7f79ab187f2914be3da266a334e66594fa7c6f7b1f92b12fa39d9e", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e80)="bf92c83717904aea1b3a5c6425bf09b3d9dcfbcd4d8bd70d8d5d3be2f5249f7c9180f061eb812c97d1027cae12e11fdec7c1a5d6bc49f439a329d1530fe369ff44b229422534a0601485c2ac0a8e7264b3db352038a6b25d79ed1c7fa87bfed0558aae9054a721149f147345a455bb513bee66d21ae262d345dd2a40c11b7ea10a57065f68d5570a895c3f4f0c06dc32307c92ca7ba87c2f190db2f4552e35c95532f8afa562bc4cb8e7dc88ba342224dc174c4e88537c2e91239280af07fd486d0a0d3ad63c28b63e22225c82a584cbc425881503ca08b18d3d813b5e90df9fd3c8fb13a1b32b4ae0123271e5", 0xed}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 430.327208][ T9038] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 07:41:57 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x7ff, 0x4) dup(r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x80000000) fchdir(r0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000200)="f7", 0xfdef}], 0x1, 0x4, 0x0) [ 430.514793][ T3798] Bluetooth: hci1: command 0x040f tx timeout 07:41:57 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x3, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(r2, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 07:41:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da07000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003440000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900bee982"], 0x0}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, [], 0x4, 0x8}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x0, 0x6, 0x8, r1, 0x0, &(0x7f00000000c0)={0x990af5, 0x7, [], @p_u16=&(0x7f0000000080)=0x9}}) 07:41:58 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 431.149410][ T9053] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 431.157963][ T9053] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 431.333320][ T8696] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 431.573859][ T8696] usb 2-1: Using ep0 maxpacket: 16 [ 431.694493][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.706113][ T8696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.718000][ T8696] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 07:41:59 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 431.884013][ T8696] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.893619][ T8696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 431.901854][ T8696] usb 2-1: SerialNumber: syz [ 431.996279][ T8696] usb 2-1: config 0 descriptor?? [ 432.076874][ T9064] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 432.085384][ T9064] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:41:59 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 432.599121][ T8693] Bluetooth: hci1: command 0x0419 tx timeout [ 432.685283][ T9072] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 432.693822][ T9072] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.716544][ T8696] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 432.724514][ T8696] microsoft 0003:045E:07DA.0001: item 0 2 0 8 parsing failed [ 432.732578][ T8696] microsoft 0003:045E:07DA.0001: parse failed [ 432.739248][ T8696] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 433.164730][ T38] usb 2-1: USB disconnect, device number 2 07:42:00 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 433.458170][ T9093] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 433.466766][ T9093] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:01 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 433.994367][ T3217] usb 2-1: new high-speed USB device number 3 using dummy_hcd 07:42:01 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 434.233839][ T3217] usb 2-1: Using ep0 maxpacket: 16 07:42:01 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 434.354640][ T3217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.366014][ T3217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.376459][ T3217] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 07:42:01 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e24, 0xfff, 0x4e21, 0x4, 0x0, 0x80, 0xa0, 0x7fd1941686a3fb92, 0x0, 0xee01}, {0x1, 0x0, 0x1000, 0x8000000000, 0x5, 0x1, 0x27f, 0x8000}, {0xac, 0x7, 0x8f65, 0x3f}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x1, 0x3, 0x4, 0x1, 0x40}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x15c, &(0x7f00000002c0)="c4c691019919da07ae2df75511878f43e907000000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a44b0728c2a46e1bc340e29b9ab9b71362838350808ffdb2dc4a741357baa16dacdcfac32957d83d8c0b2e3482945fef116371f8c8c0c4db583a208718e3cb8a6acd008d74012f895e3e3e3cc817de0b72537cf19b7a1f87c1df28865576f729e217f33ff59e5aa365e4ca28057e26c8a7ae117650a7e18c7e7f44e0a2c7a5bd6045478034dadbba6005fd2073ee6d1b00ebfa642845ddc75289168b5abe44d475017819ec2c6e8a6a112b40619ebfcba13ea64a0a1d12fbad478921e022fa89b2fccd39691f7dbdbf7eaeed97f614ed50fbe6f07c09e3e020fafb28353a2801f2b38cdfa0aeb6752b36018569e36b688210f3772e529c12cde4b1199c97f84cb5983154446cce36ef0a519c3c413662aed12dc9df8ce3a4f96454962d9bf77199aa226e4ab73"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = getpid() tkill(r5, 0x2f) [ 434.545233][ T3217] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 434.554600][ T3217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 434.627171][ T3217] usb 2-1: config 0 descriptor?? [ 434.664342][ T3217] usb 2-1: can't set config #0, error -71 [ 434.700619][ T3217] usb 2-1: USB disconnect, device number 3 [ 434.708507][ T9113] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 434.717125][ T9113] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:02 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000010a01371700000000000000050000060c00044000000000000000050c00044000000000000000050800024008dd71010c00044000000000000000040c00044000000000000000030900010073797a31000000000c00044000000016edd5beb98bf45fc59ac81aaa4a000000000208c702400000a4000c0004410000000000000003080002400000000085ad98b6a1355708"], 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 435.363281][ T9132] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 435.371468][ T9132] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:03 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 435.890525][ T9139] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 435.899070][ T9139] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:03 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 436.385830][ T9147] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 436.394156][ T9147] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:03 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 436.953179][ T9155] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 436.961362][ T9155] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:04 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 437.424886][ T9163] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 437.433385][ T9163] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b8808b5ecb0f23d80f21f86635800000b00f23f80f01c5260f380020bad004ed660fc775030f01c465f20f2db79b3ce42236f3aeb8fd000f00d8", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x8, 0x3, 0x4, 0x94f5, 0x0, 0xf1f, 0x2}) wait4(0x0, &(0x7f0000000180), 0x2, &(0x7f0000000440)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ptrace$getregs(0xc, 0xffffffffffffffff, 0x800, &(0x7f0000000340)=""/210) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa8001, 0x0, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000001680)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0xb391, 0x0, 0x4000000000000, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:42:05 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:05 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000200)='\x00\xc2\xea\x99\xbb\x0f\xf8jw\x97\x05\xa3\xa2\x03\x8c/\xf2\xbf\t\x8c\xe0Y\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8eE\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xc40001e0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f0000000040)='.\x00', 0x300, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r5) sendfile(r5, r2, &(0x7f0000000000)=0x1, 0xfffffffffffffffb) [ 438.143433][ T9182] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 438.151787][ T9182] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:05 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:05 executing program 1: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa6000001}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000007d3fae7caefc46e01b7f1c9e9b7041b7a419bad547bb47e11b303e4980335fc107b90ba649052f1402f2df5d770926a5f9444ec50d2d5e38f74f2f6e33adb3925a51369f6cb4f7164b22ffa08d4a4a72a1f3a655d0b6e4de4c7fdd98e81ba8679044e43acb9e9c61", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcdbdf250e0000002000028004000400040004000400040008000100880a000004000400040004002c000280040004002400038008000100c400000008000100010000800800020009000000080001000000a02b7000078008000200080000000c00030003000000000000000c00030000000080000000000c00030008000000000000000c0004000100000000000000080001000500000008000200010000000c00040000000000000000000c00040008000000000000000c0004002600000000000000c00206800800010004000000080001000100000043000300095ef4c4f992f18107607ac558a0ca445c40f43ae05b860d068aa7df94e4ca452d31d0afa7492cb864b10401433480652f0216754ad457517e6a08b9a59a940008000100ff0f000008000100bbf1ffff3f00040067636d2861657329000000000000000000000000000000000000000000000000170000009b6f8ef194e30fd57f884b7cc2a95924c4ed15d8d0efa0002b000300bba0f93a86b6601c37fe286f4ae45fc81519acafce7340da929795c81f3e89fd964b9be22db593004400040067636d28616573290000000000000000000000000000000000000000000000001c000000f94c41f8b34f94431abfc2a09b9ef2fa9a7a01fe18b8a0eef78e6f17de00030084a93cf6088f8bce0bb2e7e747f342bb99c20c5f0b306e44c4eb7224e90d3543d7066bfb79130ffd9d8a5f9c4c4f5c8081eb26e26a5dc6297da927e7e3a558a42171396861a4b59da7f4b834aac2effcf99a67d0d15632e725dab915a1f6b264b915524a42f6375cea7fa342e1e07a26954f73897d70581cd58cd272dd48648214a7c59a417bfbca7aad7c50272cffbb343fef4fbcf91b07571a10350a6c5c187349232601918cf8ba4c6ba499704c1981891f12fa9aaae3441926a59536a39a4608d228efdffb1623e0eb6c47fe652832abd0cde44e33d8fb630000c600030099ecc0e71def6571c4c7299a518fb05cb2e23416797bbc2e828fc2df4ead6b9c4e386686225569ba79314cf102bb5b36e4c502a685c0cb892996453c27f174ab012aed74151112eba71c6c05c6cb94e2acb8d0e31c90b245d8e27c26c12157a07f142fc98ab9c0f858b54945c66e6544482bd9fde23d9b051e96f57239168e99f61ed9ea24e8177d8b3f6a3a6abf2b7d3501e59b2c6db97a1e1bb4d3be17a5afd0c58926e32d62e569ea7a439c64ae5546ea1205a4a070bfc40c9ffd5887a7c514d40000"], 0x390}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)=@buf={0x56, &(0x7f00000000c0)="b738d7c98333255359f52c36843d25d2e113cdec42e2c3a271105a2e8378e54d2f281ee8ec688a68ead12bfd98408d2156d505fa1f3f8b96235c3780211978cf1895106beedbbef5dd0ebb65c712fb7f0078f3ab0d0c"}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) [ 438.733872][ T9196] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 438.742133][ T9196] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @dev}, {0x2, 0x0, 0xffffffff, @dev}, r1}}, 0x48) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x1180c1, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x1, @dev={[], 0x33}}, 0x4c, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 'ip6gre0\x00'}) 07:42:06 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001800010000000000000000000200000000000006000000001c0016801800038014000100fe8800000000000000000000000000010600150002"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001340)='/dev/zero\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:42:06 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 439.611323][ T9217] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 439.620094][ T9217] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x5b, 0x39, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa41, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r1 = signalfd4(r0, &(0x7f0000000000)={[0x800]}, 0x8, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x8000, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x8, 0x5}, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xc, 0x8c, 0xc641}, &(0x7f00000003c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x2}}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = dup(r3) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xb, &(0x7f0000000040)=@raw=[@exit, @call, @generic={0x0, 0x2, 0x5, 0x3, 0x10000}, @generic={0x6, 0xb, 0xc, 0xfff, 0x5}, @alu={0x4, 0x0, 0x1, 0x5, 0x2, 0x6, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @generic={0x6, 0xb, 0xa, 0x8000, 0x100}, @call={0x85, 0x0, 0x0, 0x5b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000140)='syzkaller\x00', 0xc6, 0xdc, &(0x7f0000000180)=""/220, 0x40f00, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x3}, 0x10, r2, r4}, 0x78) 07:42:06 executing program 2: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000033c0), 0x4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000003400)={{0x1, 0x0, @reserved="90f2dd14dcd2e6f829f789a179cd1a195e84eb3e584a28973bb617ffe03f3bba"}, 0x7f, 0x0, [], "bc9e052e6f80f83105fa76452b5fc7b3cec479c8442e2a7a1f6b2e1d7488872a587b29bbe550d86402b0f0e81c3ff0cfd4dab467a58880c9bf49d871e61048754c65ff8acbf79f2e11ece7c3e2b897413a9992f78f89c7a36678f6fad7b748c3482c90fa5adcdf4732388686233ee16fd34434e87cc01945e2290d7d6fec1e"}) r1 = syz_io_uring_complete(0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000003500)={0x4, 0x4b5}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000003540)={{r0}, {@val, @actul_num={@void, 0xdee7, 0x50}}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000003580)) fcntl$setlease(r1, 0x400, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000035c0)) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000003600)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000003640)={0x0, 0x1da, 0x0, 0x8, 0x86, 0x7, 0x0, 0x81, 0x0}, &(0x7f0000003680)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000036c0)={r3, 0x2, 0x8001, 0x0, 0x7, 0x2, 0x13, 0x5, {0x0, @in6={{0xa, 0x4e20, 0xb99e, @private2={0xfc, 0x2, [], 0x1}, 0x3}}, 0x3ff, 0x3, 0x8, 0xcbb, 0x18000}}, &(0x7f0000003780)=0xb0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000037c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000003800)=0x5) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003840)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xc000000, 0x0, 0x5896280a]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x6ebf, 0x2, 0x7fffffff, 0x5]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x4890) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f00000039c0)={0x1, 0x2, 0x4}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000003a00)={0x200, 0x1, 0x100, 0x200, 0x1, 0x7fffffff}) bind$pptp(0xffffffffffffffff, &(0x7f0000003a40)={0x18, 0x2, {0x3, @loopback}}, 0x1e) 07:42:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) socket$can_j1939(0x1d, 0x2, 0x7) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x101840, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r5) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x8004ae98, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x0, 0x0, 0xc0010015]}) dup2(r7, r4) 07:42:07 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 440.418421][ T9229] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 440.460893][ T9233] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 440.469323][ T9233] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:08 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x1140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x4d4800) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {}]}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, r0, 0xccad0000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 07:42:08 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 441.070099][ T9250] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 441.078500][ T9250] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:09 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 442.149188][ T9265] IPVS: ftp: loaded support on port[0] = 21 07:42:09 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000ac0)="ee", 0xff00}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x548) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000040)={0x6, 0x7f, 0xf04}) [ 442.460715][ T9286] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 442.469443][ T9286] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:10 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 443.206887][ T9377] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 443.215281][ T9377] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:10 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}]}, 0x84}}, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@policy_type={0xa}]}, 0x5c}}, 0x0) [ 443.784855][ T9265] chnl_net:caif_netlink_parms(): no params data found 07:42:11 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 443.956089][ T8693] Bluetooth: hci2: command 0x0409 tx timeout 07:42:11 executing program 1: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010078d2bddeff00000011174554820086ea66088a09c2cd10d0000000010902120001"], 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x100, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x800, 0x5946f34b, 0x27, 0xfff]}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/233) keyctl$setperm(0x5, 0x0, 0x30420) [ 444.167437][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.174919][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.184501][ T9265] device bridge_slave_0 entered promiscuous mode [ 444.319008][ T9422] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 444.327370][ T9422] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.622892][ T3217] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 444.790264][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.797728][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.807732][ T9265] device bridge_slave_1 entered promiscuous mode [ 444.862769][ T3217] usb 2-1: Invalid ep0 maxpacket: 512 [ 444.887778][ T9265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 07:42:12 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 444.963330][ T9265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.022752][ T3217] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 445.060479][ T9265] team0: Port device team_slave_0 added [ 445.114596][ T9265] team0: Port device team_slave_1 added [ 445.170236][ T9448] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 445.178661][ T9448] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.262745][ T3217] usb 2-1: Invalid ep0 maxpacket: 512 [ 445.269254][ T3217] usb usb2-port1: attempt power cycle [ 445.462561][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.469665][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.496110][ T9265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.522525][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.529603][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.555844][ T9265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.649061][ T9265] device hsr_slave_0 entered promiscuous mode [ 445.659444][ T9265] device hsr_slave_1 entered promiscuous mode [ 445.676046][ T9265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.684441][ T9265] Cannot create hsr debugfs directory [ 445.977767][ T9265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.018627][ T9265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.033304][ T8695] Bluetooth: hci2: command 0x041b tx timeout [ 446.059548][ T9265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.083330][ T3217] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 446.108151][ T9265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.205888][ T3217] usb 2-1: Invalid ep0 maxpacket: 512 [ 446.362872][ T3217] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 446.454197][ T3217] usb 2-1: Invalid ep0 maxpacket: 512 [ 446.460334][ T3217] usb usb2-port1: unable to enumerate USB device [ 446.487983][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.526834][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.536148][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.563056][ T9265] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.584298][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.594354][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.604277][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.611508][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.655141][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.664795][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.675166][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.685101][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.692476][ T3217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.701595][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.775724][ T9265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.786731][ T9265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.803559][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.815245][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.825984][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.836633][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.847515][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.858138][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.868008][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.878722][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.888659][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.904148][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.914273][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.993553][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.001337][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.040954][ T9265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.108698][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.119496][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.195339][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.206682][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.221163][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.231118][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.249116][ T9265] device veth0_vlan entered promiscuous mode [ 447.286950][ T9265] device veth1_vlan entered promiscuous mode [ 447.457399][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 447.467058][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 447.476744][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.486929][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.532513][ T9265] device veth0_macvtap entered promiscuous mode [ 447.563405][ T9265] device veth1_macvtap entered promiscuous mode [ 447.641565][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.652689][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.662795][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 447.673450][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.687191][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.697352][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.706991][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 447.717235][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 447.727362][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.756037][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.767886][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.779199][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 447.789883][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.803726][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.824514][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.834984][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.114354][ T8647] Bluetooth: hci2: command 0x040f tx timeout 07:42:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="eeffffffffffffff"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)) 07:42:15 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xfffffffd, 0x12, "0800000004ff0000000400"}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) r2 = syz_open_pts(r0, 0x0) r3 = dup2(r2, r0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes128, 0x8, [], "9e96a019a4bd94f9fa2f31f990340f5b"}) ioctl$TCXONC(r3, 0x540a, 0x3) [ 448.565402][ T9533] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 448.573782][ T9533] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:16 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="f112a6488b515bc4a26f2e85ad91bf71d8aa59fb40d22a9e88eba694ceded4e81029812439a089f90507e5a12c80ef962643d674dfe50bd9cc7c4afa072971bc8714301dad1c87a490655689a6afad60d587c4e3fe145d6e93e97650db630563a496b75d350995c65c9e0d0dee95dc2832e3138e796aced2027577cac9bdd549fe5e9e66fcddb624014494d51a3d3f87effae63d43d83403a8a17bec052e113746dc3e76c56edd106a29f94865b3eccf9ed5d97bce82a7042231d278e4a7ffd0238956574226a5862ba18e49a465331a15849dd7a79b697a948b7bff225cd9c4fc0b8f930d0595f9e22d94280210156abc198c97e347081516cbc2b8cdbb8c59b164478e0593579b25096363eb4f77c5fead66473cec2d501d116576fe1605a3e2cffdc02f23f5065c09e4378c7c7f5213fc87cd2742dc00e1fef6447c9c152c07978b9e94c412de10c22a425b028fc2dd7a06775f4390235575202736381d6baac7298ed5bd5c540a7006b521b386e1fec781bfeaaee1bd4d0f880f320a4a7eb34273f857c19a7f272678b2e88b0a56ad2b92eeed64d1fd80689634d567f91a67e107b8539e64dd8813502843be4bb55bd0f6"], 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f4c88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {}, @result={0x9, 0x34}}], 0x1c) 07:42:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x30}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) [ 449.436314][ C0] sd 0:0:1:0: [sg0] tag#5814 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 449.447025][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB: Test Unit Ready [ 449.453979][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.463823][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.474549][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.484664][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.494598][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.504457][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.514332][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.524207][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:16 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 449.534063][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.543944][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.553825][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.563782][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.573635][ C0] sd 0:0:1:0: [sg0] tag#5814 CDB[c0]: 00 00 00 00 00 00 00 00 [ 449.654273][ T27] audit: type=1800 audit(1598427736.847:2): pid=9555 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15732 res=0 07:42:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f4c88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {}, @result={0x9, 0x34}}], 0x1c) [ 449.750581][ T9567] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 449.758893][ T9567] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.861811][ C0] sd 0:0:1:0: [sg0] tag#5815 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 449.872508][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB: Test Unit Ready [ 449.879182][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.889117][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.899007][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.908882][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.918771][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.928652][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.938877][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.948760][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:17 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) unshare(0x40600) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@none, 0xfffff6aa, 0x2d2e, 0xfff, 0x101, 0xff, "1deb1e7524c8dc173c0092f700a5fb3fd88d3fe0788fa58d0b045d536d8380e9d7145f22ae8351c500754ad87de4305f3693f4b1dcdee03d0b7f2494fa76b118ef4f22492fa880a35c1bf174348df796759d38c9a9fd17c237f9dea96e255c2dd624fb2505e6a2da6b209563772b2845632247a8bbc74d9e85862423f1c16a38"}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect(r2, &(0x7f00000056c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0000001000"/32], 0x4) write$binfmt_misc(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf97d9c5c953948c6801d2c0945c08ba8c552fc99a742200764947271a505ca0f3c2c888526774b6a7ffed0b877a7a08e96d20b154dfe75fcaea8ac9edba58fd7d05b337a3a3345c186478a133c5ab261828d500f5773b775c51aebb155366317e718bdb9df1fdf9bb41a32b270e09ba295c558b82db8b9e8c1efdae8bb558a7528b01a56d3f13e04e9c8d0d59ef4"], 0x5c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x7ff, 0x800d, 0x20, 0x2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) [ 449.959221][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.970061][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.980041][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.990069][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.000005][ C0] sd 0:0:1:0: [sg0] tag#5815 CDB[c0]: 00 00 00 00 00 00 00 00 [ 450.314006][ T27] audit: type=1800 audit(1598427737.507:3): pid=9573 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15732 res=0 [ 450.424410][ T9576] Cannot find add_set index 0 as target [ 450.480119][ C0] sd 0:0:1:0: [sg0] tag#5816 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 450.490796][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB: Test Unit Ready [ 450.497589][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.507484][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.517407][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.527290][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.537246][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.547461][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.557339][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.567346][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.577228][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.587225][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.597105][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.606983][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.616961][ C0] sd 0:0:1:0: [sg0] tag#5816 CDB[c0]: 00 00 00 00 00 00 00 00 [ 450.624905][ C0] sd 0:0:1:0: [sg0] tag#5817 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 450.635738][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB: Test Unit Ready [ 450.642490][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.652362][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.662233][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:17 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x8, @raw_data="976d0fd98dfe57c8376687e18b085f06fcbb93976589f4fd8c346e1abd1f40203b2fb969d26aba5100e5e2db4c519a6666febb08ba285b762143681d840e3f94d3f9bbeeb4125aa3bc41f2b8c4a009d6baa2ba9b93ab4b9adbee551e038302251e5805216d75f005cb90a8a403e08f9da4dba33afd938d7e91dde08b6c744e6e9f7471219a50a2634a3c1a9e9b3cd8fd4e6b694ec9c1f8d8ec271bc7bb6212abf43636be7994ed8f04a900d5064b8fe074a5c1e014dc3b315fded4929fc185658dab56c095459feb"}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r2, &(0x7f00000000c0), 0x0) [ 450.672029][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.681923][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.691809][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.701882][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.711882][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.721765][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.733136][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.743052][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.752955][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.762858][ C0] sd 0:0:1:0: [sg0] tag#5817 CDB[c0]: 00 00 00 00 00 00 00 00 [ 450.807260][ T8647] Bluetooth: hci2: command 0x0419 tx timeout 07:42:18 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x101, 0x7ff, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="fafff0000000000024001200090001007866726d0000000014000200080001000200000008000200010000000a0001000400000000"], 0x58}}, 0x0) [ 451.143689][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 451.159138][ T9587] device xfrm1 entered promiscuous mode [ 451.233022][ C0] sd 0:0:1:0: [sg0] tag#5818 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.243736][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB: Test Unit Ready [ 451.250602][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.260706][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.270758][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.280730][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.290609][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.300501][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.310421][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.320309][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:18 executing program 1: ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x9, &(0x7f00000000c0)=[{0x54}, {0x14}, {0x6}, {0xd1, 0x0, 0x6, 0x3ff}, {0x7ff, 0x46, 0x8, 0x5b2f2d2c}, {0x800, 0x4b, 0x4, 0x3}, {0x1, 0xff, 0x80, 0x1}, {0x7ff, 0x7, 0x7f, 0x2118}, {0x4, 0x8, 0x3f, 0x5d39e7d7}]}) 07:42:18 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) unshare(0x40600) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@none, 0xfffff6aa, 0x2d2e, 0xfff, 0x101, 0xff, "1deb1e7524c8dc173c0092f700a5fb3fd88d3fe0788fa58d0b045d536d8380e9d7145f22ae8351c500754ad87de4305f3693f4b1dcdee03d0b7f2494fa76b118ef4f22492fa880a35c1bf174348df796759d38c9a9fd17c237f9dea96e255c2dd624fb2505e6a2da6b209563772b2845632247a8bbc74d9e85862423f1c16a38"}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect(r2, &(0x7f00000056c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0000001000"/32], 0x4) write$binfmt_misc(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf97d9c5c953948c6801d2c0945c08ba8c552fc99a742200764947271a505ca0f3c2c888526774b6a7ffed0b877a7a08e96d20b154dfe75fcaea8ac9edba58fd7d05b337a3a3345c186478a133c5ab261828d500f5773b775c51aebb155366317e718bdb9df1fdf9bb41a32b270e09ba295c558b82db8b9e8c1efdae8bb558a7528b01a56d3f13e04e9c8d0d59ef4"], 0x5c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x7ff, 0x800d, 0x20, 0x2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) [ 451.330267][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.340149][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.350031][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.359903][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.369764][ C0] sd 0:0:1:0: [sg0] tag#5818 CDB[c0]: 00 00 00 00 00 00 00 00 07:42:18 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 451.673812][ C1] sd 0:0:1:0: [sg0] tag#5819 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.684593][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB: Test Unit Ready [ 451.691261][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.701274][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.711230][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.720918][ T9597] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 451.720957][ T9597] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.738933][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.748970][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.758971][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.768961][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.779126][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.789259][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.799672][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.809659][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x6a, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x8]}, &(0x7f0000000100), 0x8) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) [ 451.819623][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.829584][ C1] sd 0:0:1:0: [sg0] tag#5819 CDB[c0]: 00 00 00 00 00 00 00 00 [ 451.859905][ T9593] Cannot find add_set index 0 as target 07:42:20 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:20 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002bbd7000ffdbdf250700000005000005001400200000000000000000"], 0x24}}, 0x4004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0x9}]}, &(0x7f0000000180)=0x10) r3 = msgget$private(0x0, 0x404) msgctl$IPC_RMID(r3, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x3e3, 0x7f, 0xd8, 0x7d, 0x9}, &(0x7f00000002c0)=0x72) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x40000) 07:42:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0000a2000000a200eb2b2005001f5b2a03b2538fecba8ebeb1600ab506000000000000002890917ffedfcf7455f8d6e930ba34f87ffefdadaec635376de347863b58e34913de7481fe7681579d02824c78fe79243ee1ed124825300c55fac285af8cb3f4b5ab1d93b3869f62fc237b0a254bc2a45f07e80fab0c3c3955c3c356525df2e7f01837dc96f37b43528620c9ec073c2ff111f6f3b3f257753dc1295a46"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 453.045907][ C1] sd 0:0:1:0: [sg0] tag#5820 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 453.056697][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB: Test Unit Ready [ 453.063508][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.073470][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.083427][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.093432][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.103383][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.113327][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.123296][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.125863][ T9616] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 453.133226][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.141322][ T9616] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 453.151036][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.151153][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.180165][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.190188][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.200127][ C1] sd 0:0:1:0: [sg0] tag#5820 CDB[c0]: 00 00 00 00 00 00 00 00 [ 453.413470][ T38] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 453.774590][ T38] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.786384][ T38] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.796555][ T38] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 453.806130][ T38] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.960463][ T38] usb 2-1: config 0 descriptor?? 07:42:21 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:21 executing program 2: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) r1 = semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080), 0x0) semctl$SETALL(r1, 0x0, 0x11, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000220000d403ffff633b27e59aa1c83d594616631686ec9cbb32a146175dd1067304003f0fc7e36e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765000000000080812d274014ae40b8ae4f2a88d2fbea75e14a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fa7f000000522d45cc36c2"], 0x14f) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)="31a8a74c68e0576d9cd0c4741a0f6839f84fc6baa465a3f1153fbe538f25a929d282536660351a3581028e66de385e10e131124fe3f5ba72073e2d3c3f96cfb6d13ca9b9c6d5a0fee2b32c81839ef87b1843cf32bb270e925b79761d84da87242cd3d95cf159acc29f558ec395850eaaaa9061726fb30646066dd00503f0eec9f7c956570dddedbf0e6692cbf6427e52855de62360ab42", 0x97}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a55a", 0xb2}], 0x6, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00ecddaa287dbb2edbe249c5e1a10000001c000000000000000100000002000000d4294c4a2deb11bbf44b79bebdc664ccc1d8bbcc1133f619fc47c5e14cd9c38b83e207599b85f7c8c57cef89e69cb22f3f25d7108c", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000003", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRES32], 0xb8, 0x28000}], 0x1, 0x50) getegid() r5 = geteuid() fchown(r0, r5, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) [ 454.258717][ T9629] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 454.267298][ T9629] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 454.446266][ T38] microsoft 0003:045E:009D.0002: ignoring exceeding usage max [ 454.473562][ T38] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 454.481105][ T38] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 454.488773][ T38] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 454.496498][ T38] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 454.504127][ T38] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 454.511653][ T38] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 454.519418][ T38] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 454.527360][ T38] microsoft 0003:045E:009D.0002: unbalanced collection at end of report description [ 454.538051][ T38] microsoft 0003:045E:009D.0002: parse failed [ 454.544595][ T38] microsoft: probe of 0003:045E:009D.0002 failed with error -22 [ 454.648251][ T38] usb 2-1: USB disconnect, device number 8 07:42:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x0, 0xffffffff}, {0x6}]}) 07:42:22 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:22 executing program 2: syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12e0c90000000040ac050e02f646aef80001090224000101000000090400000803010200292100000001220000090581030772590bc64e1ec42aa77f677595d9040027941acc3d0590183f3fd183d525e781f5110e0533d71fd7fb82541734fcdb513e75a886feaac42b158437a01c82a9e6814ba8dc700e08af60276ec5db7807cf5e2f76"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xd8400, 0x0) recvfrom$l2tp(r4, &(0x7f0000000100)=""/124, 0x7c, 0x2004, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) dup2(r3, r0) [ 455.400320][ T9654] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 455.408652][ T9654] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.423817][ T3217] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 455.783013][ T3217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.794370][ T3217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.804616][ T3217] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 455.813951][ T3217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.924715][ T3217] usb 2-1: config 0 descriptor?? 07:42:23 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:23 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2f0417f8, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x3010}}) [ 456.293216][ T3217] usbhid 2-1:0.0: can't add hid device: -71 [ 456.299548][ T3217] usbhid: probe of 2-1:0.0 failed with error -71 [ 456.344697][ T3217] usb 2-1: USB disconnect, device number 9 07:42:23 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0xf01a, 0x78f0528b}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 07:42:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4) dup2(r1, r4) 07:42:24 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) 07:42:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/926], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="030000000a00", @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB="1000020000000000"], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) 07:42:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4) dup2(r1, r4) 07:42:24 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 457.303802][ C1] sd 0:0:1:0: [sg0] tag#5822 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.314499][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB: Test Unit Ready [ 457.321161][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.331170][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.341072][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.351022][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.360923][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.370930][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.380826][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.390691][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.400664][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.411907][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.421722][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.431631][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.441531][ C1] sd 0:0:1:0: [sg0] tag#5822 CDB[c0]: 00 00 00 00 00 00 00 00 07:42:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4) dup2(r1, r4) 07:42:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d274014ae40b8ae4f2a88d2fbea75e06a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb21be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b60e1f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4000000007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a6757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d264673301883128266b6201eacdfe51736c31f7feb6f6030a10e69c903927a5c11effd62911abc72d261c2eeb0a7c7f81d5ea9e4fc342717c43d8e2192f121cedce1b040a58a490e012785e2d04eba58a52cc9f15d9e9bcec24a3230a7bff038000000000003a3964045af092de789b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459abdaf4f37ba61dc89567451000000000000000000da5fad4927bcc92b26fc45d76e64a428257381d2e46d6adc68cf5da791865bb3a834ecb6ed99147efcc54bcb21c16ccc8e65a5fc0b336a01c1fb7ea7632e9eef404b16867bec7ab5ed9604a5f0496f5b974848e02e7c1f1e8963cb608adb66979a5d28771337190d87bc6a41e0071e429c40518009e449006457bc3b9e34a98472682fd9758c963c7b89f4f6e502b78df6534d00"/926], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="030000000a00", @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB="1000020000000000"], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) [ 457.874857][ C1] sd 0:0:1:0: [sg0] tag#5823 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.885558][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB: Test Unit Ready [ 457.892397][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.902300][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.912218][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.922132][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.932348][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.942485][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.952481][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.962371][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:25 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 457.972289][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.982187][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.992077][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.001963][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.011911][ C1] sd 0:0:1:0: [sg0] tag#5823 CDB[c0]: 00 00 00 00 00 00 00 00 07:42:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4) dup2(r1, r4) [ 458.294417][ C1] sd 0:0:1:0: [sg0] tag#5760 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.305114][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB: Test Unit Ready [ 458.311919][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.321818][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.331614][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.341565][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.351579][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.361493][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.371508][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.381656][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:25 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) [ 458.391593][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.401499][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.411402][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.421290][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.431201][ C1] sd 0:0:1:0: [sg0] tag#5760 CDB[c0]: 00 00 00 00 00 00 00 00 07:42:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/926], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="030000000a00", @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB="1000020000000000"], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) 07:42:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) dup2(r1, r4) 07:42:26 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 459.017234][ C1] sd 0:0:1:0: [sg0] tag#5761 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 459.027949][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB: Test Unit Ready [ 459.034925][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.044828][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.054804][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.064682][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.075089][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.085111][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.095277][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.105191][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.115375][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.125289][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.135205][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.145193][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.155621][ C1] sd 0:0:1:0: [sg0] tag#5761 CDB[c0]: 00 00 00 00 00 00 00 00 07:42:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) dup2(r1, r4) 07:42:26 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 07:42:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/926], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="030000000a00", @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB="1000020000000000"], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) 07:42:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r4) [ 459.656725][ C0] sd 0:0:1:0: [sg0] tag#5763 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 459.667527][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB: Test Unit Ready [ 459.674336][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.684249][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.694170][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.704132][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.714065][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.724008][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.734024][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.744820][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:42:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 459.754840][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.764776][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.775235][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.785123][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.795677][ C0] sd 0:0:1:0: [sg0] tag#5763 CDB[c0]: 00 00 00 00 00 00 00 00 07:42:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) dup2(r1, r4) 07:42:27 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x1000000000000000, 0x405400, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x2, 0x201, 0x0, 0x0, {0xc}, [@CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6abe}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc800}, 0x40044) 07:42:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x90}}, 0x0) 07:42:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) dup2(r1, r4) [ 460.274994][ T9739] binder: 9738:9739 unknown command 203703433 [ 460.281193][ T9739] binder: 9738:9739 ioctl c0306201 200002c0 returned -22 07:42:27 executing program 2: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000100)) r2 = syz_io_uring_complete(0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="03020000000000002800128009000100766c616e000000001800028006000100020000000c0002000e0000000a00000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00'], 0x58}}, 0x0) 07:42:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x90}}, 0x0) 07:42:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x90}}, 0x0) 07:42:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) dup2(r1, r4) 07:42:28 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000880), 0x1000) socket$unix(0x1, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) socket$inet(0x2, 0x80001, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x7b) pipe(&(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b4f003e00b0b9cad4a128"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:42:28 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6], 0x90}}, 0x0) 07:42:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r4) [ 461.217287][ T9761] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 461.233969][ T9761] device bridge0 entered promiscuous mode [ 461.239835][ T9761] device macsec1 entered promiscuous mode [ 461.365173][ T9761] device bridge0 left promiscuous mode [ 461.749481][ T9766] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6], 0x90}}, 0x0) 07:42:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r4) [ 461.936923][ T9773] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 461.954050][ T9773] device bridge0 entered promiscuous mode [ 461.959906][ T9773] device macsec1 entered promiscuous mode [ 462.041246][ T9773] device bridge0 left promiscuous mode [ 462.420250][ T9779] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r4) 07:42:29 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643c9d52c3d02ed2afb85163e75092eef7bd0f624cd3cd088de78052ac200fe8e6e0f9701cbb622c2b18d2d48b4e6ca6831e1dc04009f384e8822e394a5d989032ccc93e17aa7a718ed0767317867285dbea8517d4858df22638ab8637271d2d3f856af2ab62af392396", @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) chroot(&(0x7f0000000040)='./file0\x00') sendmsg$can_raw(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@canfd={{0x3, 0x1, 0x1}, 0x20, 0x0, 0x0, 0x0, "4afd825d2a3252553a45e45570e853256228db8e787d7997c52255e2dbe08251b3d97a8fc6efe4d19f6dbe3a2d0ab1ba219affb705cf20e492bb4f8581c6b548"}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x404c814) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000240)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 07:42:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6], 0x90}}, 0x0) [ 462.741976][ T9789] fuse: Unknown parameter 'group_id0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, 0xffffffffffffffff) [ 462.782471][ T9792] fuse: Unknown parameter 'group_id0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, 0xffffffffffffffff) [ 463.260309][ T9801] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:30 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB], 0x90}}, 0x0) 07:42:30 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340)=0x1, 0x4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept(r3, &(0x7f00000002c0)=@hci, &(0x7f0000000040)=0x80) recvmsg$can_bcm(r1, &(0x7f0000000900)={&(0x7f0000000640)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/117, 0x75}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/50, 0x32}], 0x3, &(0x7f00000008c0)=""/40, 0x28}, 0x2140) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000940)={'vlan0\x00', r8}) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x31) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r10}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}]}, 0x50}}, 0x0) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r10}, 0x10) connect(r1, &(0x7f0000000140)=@ll={0x11, 0x0, r2}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100000013fb00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000400000000000000009373f1661aa87b4b0d6ca07edb73955521d841f2be869631ea9506dd3d50254cfa5b2b020000b62dce81000000000000f0ffffffffffffff0000000000000000"], 0x80}}, 0x0) dup3(r0, r1, 0x0) 07:42:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0xd000, 0x6000, 0x5, 0xb5, 0x9, 0xcc, 0x1f, 0x9, 0x4, 0xa, 0x43, 0x5}, {0x4, 0x5000, 0x8, 0xe0, 0x40, 0x3, 0xd4, 0x3f, 0x6, 0x5, 0x8e, 0x9}, {0x4000, 0x4002, 0x9, 0x9, 0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x9, 0x80}, {0x0, 0x3000, 0x0, 0x9, 0x36, 0x81, 0x0, 0x6, 0x20, 0x7f, 0x3f, 0xfb}, {0xd000, 0x1000, 0xf, 0xd9, 0x5, 0x1f, 0x7, 0xff, 0x1, 0x5, 0x81, 0xfc}, {0x1000, 0xd000, 0xd, 0x1, 0x96, 0x80, 0xe0, 0x9, 0x5, 0x40, 0x7, 0x1}, {0x10000, 0x5000, 0x9, 0x9, 0xfd, 0x93, 0x6, 0x81, 0xa8, 0x7, 0x9, 0x72}, {0xd000, 0x4000, 0xd, 0xe9, 0x1f, 0x9, 0x2b, 0x0, 0x0, 0x7, 0x5, 0x6}, {0x2, 0x8}, {0x6000, 0x4}, 0x0, 0x0, 0xd000, 0x101, 0x4, 0x8080, 0x1000, [0xfffffffffffffffd, 0x7, 0x1000, 0x3]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, 0xffffffffffffffff) [ 463.628154][ T9810] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:31 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB], 0x90}}, 0x0) 07:42:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r4) 07:42:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000004040d1182850000000000001090224000100002000090400000103000000092100000001222200090581034834875c93d5df5c224a6e64e31019d6804e28cb849d5fa071af22f45dbacde3c11db0bb394a414c25fa98753c373fe27bb7c5b4152b7f4c0b9a44a3badbc8d50820d8124a8104e9731e8ec960079ef2aaaff6619cc669739789abfcd89d55e99dccc88e19b7b711d787eb4bac996f3eff49be3ebb88020542e1e09af3f3c96033edd0c38eee5e28e327e60bb82147d4422e54253e23007cf3233edfde15262a7861861b318e37398338e4a944df5c2cfd5ea911577e14a9279ffb3cf47091"], 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r1, 0xf53}, 0x8) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000002c0)={0x2, 0x28, 0x2db, 0x7, 0x9, 0x0, 0xf88, 0xc0, 0x8}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000c220000009f3c2d5b7be77e382b4b63330de7a08dc00300000000000065003950b0b10196"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 463.974948][ T9818] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:31 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c0002"], 0x90}}, 0x0) 07:42:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r3) [ 464.284683][ T9825] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 464.432603][ T8697] usb 3-1: new high-speed USB device number 2 using dummy_hcd 07:42:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r3) 07:42:31 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c0002"], 0x90}}, 0x0) [ 464.719806][ T9832] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 464.792950][ T8697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 464.804678][ T8697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1096, setting to 1024 [ 464.816181][ T8697] usb 3-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 464.825518][ T8697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:42:32 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c0002"], 0x90}}, 0x0) [ 464.933443][ T8697] usb 3-1: config 0 descriptor?? 07:42:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r2) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="3facc8d542afc8c5b45f24599623c2f797b5c3ab85661d25fd4c434ac0bd06a9d244c909485a82ce278531d60bc8717f11714d4cd1e5f0b5521743cd9545457ea10314866eccfc8fdefd4f870b50573dd79d7873971056b572ffac5538c347167440091f661141ae48bd2482d5622f928d2dd26911efbcd538d1cafcbffcbdc5a7c86e3d0510c597a3568153b0df9fc49e06d6f76829b56d2942608bde0b13442c4fe23ae665f80e8af2dda5", 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x40048000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r3) [ 464.960334][ T9822] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 465.108214][ T9839] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r4) 07:42:32 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac60"], 0x90}}, 0x0) [ 465.372739][ T9842] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 465.446981][ T8697] hid (null): unknown global tag 0xe [ 465.469617][ T8697] hid-multitouch 0003:18D1:5028.0003: unknown global tag 0xe [ 465.477544][ T8697] hid-multitouch 0003:18D1:5028.0003: item 0 4 1 14 parsing failed [ 465.486395][ T8697] hid-multitouch: probe of 0003:18D1:5028.0003 failed with error -22 07:42:32 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac60"], 0x90}}, 0x0) 07:42:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r2) [ 465.648447][ T8647] usb 3-1: USB disconnect, device number 2 [ 465.731667][ T9856] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 07:42:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r2) [ 466.441744][ T8693] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 466.842087][ T8693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 466.853556][ T8693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1096, setting to 1024 [ 466.864945][ T8693] usb 3-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 466.874328][ T8693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.936855][ T8693] usb 3-1: config 0 descriptor?? [ 466.965628][ T9822] raw-gadget gadget: fail, usb_ep_enable returned -22 07:42:34 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xd3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x600000) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000002c0)={r3, 0x400}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x2, 0x20, 0x5, 0x5}, &(0x7f0000000340)=0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00ac0ab82ea23db45006095e3b53b3f4f7bba044708d02e19c95ec5258daf6ff07000000000000a6a9297fec784a31262422cc6754bec80c76d211e57d3e4451ff13367ca85ca1d03540820fd79e42e577d3e802f4bee0e05a38b3166f573b8d3a0cbc36ee3b3379928cc962da69bbae4a2648a374ca2672dc2bcbc3918f24e73b812fcf0cf931642264e0ae86bc56ac0a1d3b194a88fcbe027e98b288522b470ff697a89722179251893cd878b3f70e1cfc6dda7330bc8b8aea46d2963d5dc065b8ae07", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x4008850}, 0x20000010) sync() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 07:42:34 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac60"], 0x90}}, 0x0) 07:42:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r2) 07:42:34 executing program 3: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000240)={0x2, 0x5, 0x3f, 0x10001, 0x8}) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x5, 0xf56, 0x52, @remote, @private2, 0x1, 0x10, 0x5, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1bc, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/qat_adf_ctl\x00', 0x62a082, 0x0) connect$rxrpc(r1, &(0x7f0000000680)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2}}, 0x24) r2 = accept$unix(r1, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000780)) write$vhost_msg(r1, &(0x7f0000000980)={0x1, {&(0x7f0000000880)=""/62, 0x3e, &(0x7f00000008c0)=""/174, 0x1, 0x1}}, 0x48) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/nvme-fabrics\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000a40)={{0x0, 0x2, 0x5, 0x0, 0x3}}) dup3(r1, r3, 0x80000) r4 = getpid() sched_setparam(r4, &(0x7f0000000a80)=0x5) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000ac0)=0xf4f) pipe(&(0x7f0000000b00)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000bc0)={'icmp6\x00'}, &(0x7f0000000c00)=0x1e) [ 467.281938][ T8693] usbhid 3-1:0.0: can't add hid device: -71 [ 467.288357][ T8693] usbhid: probe of 3-1:0.0 failed with error -71 [ 467.335293][ T8693] usb 3-1: USB disconnect, device number 3 [ 467.349315][ T9877] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 467.357710][ T9877] __nla_validate_parse: 2 callbacks suppressed [ 467.357744][ T9877] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r3) 07:42:34 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800"], 0x90}}, 0x0) [ 467.620347][ T9884] input: syz0 as /devices/virtual/input/input5 [ 467.767956][ T9885] input: syz0 as /devices/virtual/input/input6 [ 467.778617][ T9894] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 467.787101][ T9894] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000000)=0x80000001) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x44}}, 0x0) 07:42:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r3) 07:42:35 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800"], 0x90}}, 0x0) [ 468.377278][ T9907] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 468.386402][ T9907] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1d, 0x0, 0x1, 0x7}, {0x2, 0xb7, 0x0, 0x100}, {0x6, 0x0, 0x40, 0x7ffffff7}, {0x2, 0x20, 0xd4, 0x20}, {0x8001, 0x80, 0x9, 0x9}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 07:42:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r1, r3) 07:42:35 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800"], 0x90}}, 0x0) [ 468.815487][ T9915] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 468.823979][ T9915] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(0xffffffffffffffff, r2) 07:42:36 executing program 2: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14f) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "b458c0e9b0a97879", "202f660bf6d1db1818b512d2473c2f7c", "3832e6d5", "0c63293a91220bea"}, 0x28) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffcc}, [@ldst={0x7}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 07:42:36 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb08000600"], 0x90}}, 0x0) [ 469.163336][ C1] sd 0:0:1:0: [sg0] tag#5787 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.174089][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB: Test Unit Ready [ 469.180780][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.190778][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.200694][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.210610][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.220517][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.230577][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.240476][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.250409][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.260459][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.270481][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.280563][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.290550][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.300519][ C1] sd 0:0:1:0: [sg0] tag#5787 CDB[c0]: 00 00 00 00 00 00 00 00 [ 469.379976][ T9922] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 469.388316][ T9922] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.764753][ T9929] IPVS: ftp: loaded support on port[0] = 21 [ 470.369663][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 470.728034][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.735534][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.745291][ T9929] device bridge_slave_0 entered promiscuous mode [ 470.840434][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.848149][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.857868][ T9929] device bridge_slave_1 entered promiscuous mode [ 471.130999][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.235505][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.499184][ T9929] team0: Port device team_slave_0 added [ 471.557933][ T9929] team0: Port device team_slave_1 added [ 471.641576][ T3217] Bluetooth: hci3: command 0x0409 tx timeout [ 471.686606][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.693877][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.720792][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.749511][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.756970][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.783576][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.926400][ T9929] device hsr_slave_0 entered promiscuous mode [ 471.952657][ T9929] device hsr_slave_1 entered promiscuous mode [ 471.982110][ T9929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.989833][ T9929] Cannot create hsr debugfs directory [ 472.366129][ T9929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 472.404210][ T9929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 472.498352][ T9929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.544669][ T9929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.919433][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.960528][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.969810][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.995285][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.026565][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.037657][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.047154][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.054522][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.114466][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.124087][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.134500][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.144025][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.151408][ T3217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.160545][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.171698][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.195469][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.206297][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.219941][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.243893][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.254788][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.302867][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.313927][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.323829][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.333604][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.351677][ T9929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.411907][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.419680][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.454308][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.523305][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 473.533889][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.595574][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 473.605673][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.629249][ T9929] device veth0_vlan entered promiscuous mode [ 473.637825][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.647620][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.689929][ T9929] device veth1_vlan entered promiscuous mode [ 473.717200][ T3217] Bluetooth: hci3: command 0x041b tx timeout [ 473.802271][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 473.811892][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 473.821546][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.832464][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.867193][ T9929] device veth0_macvtap entered promiscuous mode [ 473.920067][ T9929] device veth1_macvtap entered promiscuous mode [ 473.981031][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 473.992012][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.002061][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 474.012775][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.022910][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 474.033496][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.047601][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.071460][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 474.080996][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 474.090492][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 474.100981][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 474.184197][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 474.194799][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.204863][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 474.215425][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.225413][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 474.236363][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.250331][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.265590][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.275880][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:42:42 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100ffffffff0825881118280534690700000001010902240001010000000904004a1207010300090501009936d3b8df010a857139189058764883012dea1b365d886537ef505a5c1b14bddd1f4be43931bfa992357990eaac334e83e4b9adb5c2d5a16aefa2868e2ceb2712edaece577224f842153be7dabea8c03282ab0d89e9eeaf3d627998d383491a48d67e372681e91e9d03eadcb6b62f2ef1b9490c6f3a663013f154dd7322fcaea5b529196250815ac7cf4ad28ec2830f51e4ef2d77e7f843dfac8fb182539d71bb737fbbd667eba5c3ff9398d3995ab86aadd35456cc14d9015dd7c468ef086fb853dc3ab2b1cedc3f4865fedbdeecffa932bcfd9b6d2ed293945400ab60c312adb7dea22996441c1aeef85df8a75ef86b3b96d0"], 0x0) 07:42:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(0xffffffffffffffff, r2) 07:42:42 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb08000600"], 0x90}}, 0x0) 07:42:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$can_raw(r0, &(0x7f00000016c0), 0x10) r3 = socket$packet(0x11, 0xa, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/255) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000100)) [ 475.146761][T10155] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 475.158878][T10155] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(0xffffffffffffffff, r2) 07:42:42 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb08000600"], 0x90}}, 0x0) 07:42:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000073018900"/32], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x78) [ 475.553468][T10144] usb 4-1: new high-speed USB device number 2 using dummy_hcd 07:42:42 executing program 1: r0 = dup(0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r0, r3) [ 475.648848][T10166] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 475.657332][T10166] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 07:42:43 executing program 2: ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000440)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONCLEX(r2, 0x5450) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2240, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x3, 0x3}) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000100)={0x8, &(0x7f0000000080)="a66c6731640e561971cca0c49e6c6b5ccb435bb420c082afb706e2896634b7c8a66c00d412603832d107efc5e397a096a530c79f4ec614a44d6a2e3b222c0866c8ee9c839d07889f111f49a39b0c67dc74ecb401c90c3d0d82def3e770862286f64474de14b75fc967a79d"}) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x400, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@broadcast, 0x4e23, 0x3, 0x4e21, 0x1, 0x2, 0x0, 0x20, 0x89, 0x0, r4}, {0x5, 0x0, 0x7fff, 0x100, 0x8, 0x401, 0x7fffffff, 0x6}, {0x3, 0x81, 0x6, 0x74}, 0x5, 0x6e6bbb, 0x2, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x3506, 0x4, 0x0, 0x7, 0x3ff, 0x2, 0x4}}, 0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000001c0)=0x5) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname$inet(r7, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 475.791314][ T8697] Bluetooth: hci3: command 0x040f tx timeout [ 475.803843][T10144] usb 4-1: Using ep0 maxpacket: 8 07:42:43 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000432408e623a2fb914361e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYBLOB="6800120008000100677265005c00020008000300ac6014bb0800060043"], 0x90}}, 0x0) [ 475.922661][T10144] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.930676][T10144] usb 4-1: no configurations [ 475.936024][T10144] usb 4-1: can't read configurations, error -22 07:42:43 executing program 1: r0 = dup(0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3}}) dup2(r0, r3) [ 476.170889][T10175] ===================================================== [ 476.178033][T10175] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 476.185595][T10175] CPU: 1 PID: 10175 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 476.194271][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.204336][T10175] Call Trace: [ 476.207714][T10175] dump_stack+0x21c/0x280 [ 476.212061][T10175] kmsan_report+0xf7/0x1e0 [ 476.216494][T10175] kmsan_internal_check_memory+0x238/0x3d0 [ 476.222319][T10175] ? kmsan_get_metadata+0x116/0x180 [ 476.227540][T10175] ? kmsan_get_metadata+0x116/0x180 [ 476.232788][T10175] kmsan_copy_to_user+0x81/0x90 [ 476.237715][T10175] _copy_to_user+0x18e/0x260 [ 476.242431][T10175] move_addr_to_user+0x3de/0x670 [ 476.247398][T10175] __sys_getsockname+0x407/0x5e0 [ 476.252359][T10175] ? kmsan_get_metadata+0x116/0x180 [ 476.257574][T10175] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 476.263397][T10175] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 476.269602][T10175] ? __prepare_exit_to_usermode+0x16c/0x560 [ 476.275522][T10175] __se_sys_getsockname+0x91/0xb0 [ 476.280657][T10175] __x64_sys_getsockname+0x4a/0x70 [ 476.285850][T10175] do_syscall_64+0xad/0x160 [ 476.290420][T10175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.296327][T10175] RIP: 0033:0x45d579 [ 476.300248][T10175] Code: Bad RIP value. [ 476.304320][T10175] RSP: 002b:00007fb31bb47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 476.312743][T10175] RAX: ffffffffffffffda RBX: 0000000000004700 RCX: 000000000045d579 [ 476.320728][T10175] RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 0000000000000009 [ 476.328707][T10175] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 476.336688][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 476.344670][T10175] R13: 000000000169fb6f R14: 00007fb31bb489c0 R15: 000000000118cf4c [ 476.352670][T10175] [ 476.355007][T10175] Local variable ----address@__sys_getsockname created at: [ 476.362245][T10175] __sys_getsockname+0x91/0x5e0 [ 476.367109][T10175] __sys_getsockname+0x91/0x5e0 [ 476.371951][T10175] [ 476.374283][T10175] Bytes 2-3 of 16 are uninitialized [ 476.379479][T10175] Memory access of size 16 starts at ffff8881d3cb7de8 [ 476.386258][T10175] Data copied to user address 0000000020000480 [ 476.392404][T10175] ===================================================== [ 476.399338][T10175] Disabling lock debugging due to kernel taint [ 476.405493][T10175] Kernel panic - not syncing: panic_on_warn set ... [ 476.412090][T10175] CPU: 1 PID: 10175 Comm: syz-executor.2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 476.422148][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.432217][T10175] Call Trace: [ 476.435528][T10175] dump_stack+0x21c/0x280 [ 476.439955][T10175] panic+0x4d7/0xef7 [ 476.443887][T10175] ? add_taint+0x17c/0x210 [ 476.448331][T10175] kmsan_report+0x1df/0x1e0 [ 476.452850][T10175] kmsan_internal_check_memory+0x238/0x3d0 [ 476.458667][T10175] ? kmsan_get_metadata+0x116/0x180 [ 476.463876][T10175] ? kmsan_get_metadata+0x116/0x180 [ 476.469295][T10175] kmsan_copy_to_user+0x81/0x90 [ 476.474158][T10175] _copy_to_user+0x18e/0x260 [ 476.478771][T10175] move_addr_to_user+0x3de/0x670 [ 476.483730][T10175] __sys_getsockname+0x407/0x5e0 [ 476.488687][T10175] ? kmsan_get_metadata+0x116/0x180 [ 476.493917][T10175] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 476.499734][T10175] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 476.505897][T10175] ? __prepare_exit_to_usermode+0x16c/0x560 [ 476.512872][T10175] __se_sys_getsockname+0x91/0xb0 [ 476.517946][T10175] __x64_sys_getsockname+0x4a/0x70 [ 476.523076][T10175] do_syscall_64+0xad/0x160 [ 476.527681][T10175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.533774][T10175] RIP: 0033:0x45d579 [ 476.537666][T10175] Code: Bad RIP value. [ 476.541750][T10175] RSP: 002b:00007fb31bb47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 476.550171][T10175] RAX: ffffffffffffffda RBX: 0000000000004700 RCX: 000000000045d579 [ 476.558155][T10175] RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 0000000000000009 [ 476.566460][T10175] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 476.574450][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 476.582436][T10175] R13: 000000000169fb6f R14: 00007fb31bb489c0 R15: 000000000118cf4c [ 476.592255][T10175] Kernel Offset: disabled [ 476.596714][T10175] Rebooting in 86400 seconds..