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"]}], 0x1, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x3, 0x3}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x400800, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x74, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x17}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x0, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x5, 0xffffffff}]}, 0xc, 0x0) 01:56:50 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 496.099012][ C0] sd 0:0:1:0: [sg0] tag#3426 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.109641][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB: Test Unit Ready [ 496.116374][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.126190][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.136023][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.145899][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.155755][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.165576][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.175424][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.185249][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:56:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2}}, 0xb8}}, 0x0) [ 496.195074][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.204804][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.214618][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.224546][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.234379][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[c0]: 00 00 00 00 00 00 00 00 [ 496.258824][ C1] sd 0:0:1:0: [sg0] tag#3427 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.269507][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB: Test Unit Ready [ 496.276237][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.286105][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.295985][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:56:51 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/318]}], 0x4924924924924b3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x13) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) [ 496.305856][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.315706][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.325569][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.335416][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.345265][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:56:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r2}, 0xc) [ 496.355118][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.365002][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.374757][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.384616][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.394461][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[c0]: 00 00 00 00 00 00 00 00 [ 496.471314][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:56:51 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r5, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x14f) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r7 = getpid() read$rfkill(r6, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r7, r7, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:56:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2}}, 0xb8}}, 0x0) [ 496.730943][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:56:51 executing program 2: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000140)=0x7fff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x30000, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) rt_tgsigqueueinfo(r0, 0x0, 0xffffffff, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x7, 0x4) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000300)="3080", 0x2, r3) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000080)=0x0) r6 = getgid() keyctl$chown(0x4, r3, r5, r6) [ 496.884067][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:56:51 executing program 5: r0 = io_uring_setup(0x196, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0}, 0x0) 01:56:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x80000001}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 01:56:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2}}, 0xb8}}, 0x0) 01:56:52 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x9, 0x81, 0x2004, 0x4, 0x7, 0x2, 0x3, 0x5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0xa, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0000000032b84e7b3c6e3f2ab0a0bbcd4a82acfd27570d8f", @ANYRES16=r4, @ANYBLOB="000829bd7000fbdbdf250a0000001400098008000100010000800800020009000000f4010680970003005c0beb18c57c6c8ad318c02f0db1a770186d097df3ed391e1e00f266f3df4a8c7596ca7ad33c50564ac3ab42ba3b82fe80761ed79868c8dac587bad8379c8710d4ccbf0d131fa90c8d50b060211bf0a8aaeea2a3fede80cac2b7515995f7591ec74a9a66a8e9f2cb3ea2b6961fc11d56416e2402aee41aaa808744a89270c0d828d9b1184b9e8c5bf6e6a8b49f1113929cbfb400380003004bbb8d60d116dc497918ea730cb3383b16bb053f34b212422960641ec0ba296cbb5b7f0c6ec53e47038280a3df62292b5a933fa57fce770334c62bb5a8467ae43d9a15a87ada8f4948c2c86b8afe01dbbca949871733ed47ca2dcd3551a2afbaf5b3c736eb4d7e34fc80718b7f30964a0d91260724a53736a35da1a8a903a7928d9d606be19acdd0a22a71fdcb4af10b06b0f33e76c0f2c84a936bba7d93a9b9e46fbee56720a4f8076eb74b84027bd2ffdc80192bfed9ad0156764642b58c580d2b397a4932fd334756c1630078000300ddc512e28bfe230b60d8dc231e69ab7fdfe77d916ec5fefb3cf34b4d0faca0d8acc49f0217605f1dea271dc949bd89eca1deece1e4ab6a77b6b014c2981175b02440810bdcd57c4a1024d9c0dd0224ef6f980bb804d140ab1f6aa05011b426bf051895f79ea7862641cc54c242987ab0ab371b2c140104800900010073797a30000000000c00078008000300000040004c00078008000200030000000800040053fdffff08000400030001000800040400000000000000003123000008000400000000000800020000f8ffff0800040000080000080001000a0000001300010062726f6164636173742d6c696e6b00002c000780080003000500000008000400080000000800010005000000080001001400000008000400090000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b0000240007800800040000080000080003007912000008000200ff01000008000300020000001300010062726f6164636173742d6c696e6b00000c0007800800010012000000400007800c00030002000000000000000c000300de0000000000000008000200613affff0800010004000000080001003d0400000c0003000700000000000000140007800800020000800000080001000300000010000680040002000400020004000200"/910], 0x394}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x4, 0x11, [], 0x0, &(0x7f0000000400), &(0x7f0000000440)=""/17}, &(0x7f0000000640)=0x78) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r6 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r6, r6, 0x13, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0xffffffffffffffff, 0x0) 01:56:52 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:56:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x80000001}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 01:56:52 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') recvmmsg(r2, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x111, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bdb64c46e870a05594eb"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001705000000000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x7fffffff, 0x4) 01:56:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x400000b1}]}) 01:56:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='+4', 0x2}], 0x1000000000000261) [ 497.532393][ C1] sd 0:0:1:0: [sg0] tag#3430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 497.543037][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB: Test Unit Ready [ 497.549806][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.559689][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.569558][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.579419][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.589260][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.599090][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.608939][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.618776][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.628690][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.638529][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.648355][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.648958][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 497.658208][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.658323][ C1] sd 0:0:1:0: [sg0] tag#3430 CDB[c0]: 00 00 00 00 00 00 00 00 01:56:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x80000001}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) [ 497.736120][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:56:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x400000b1}]}) 01:56:52 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000)) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 01:56:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x80000001}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 01:56:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='+4', 0x2}], 0x1000000000000261) 01:56:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x400000b1}]}) [ 498.235406][ C0] sd 0:0:1:0: [sg0] tag#3431 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.246026][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB: Test Unit Ready [ 498.252631][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.262601][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.272435][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.282261][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.292097][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.301963][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.311784][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.321610][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.331449][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.341266][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.351089][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.360941][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.369046][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 498.370791][ C0] sd 0:0:1:0: [sg0] tag#3431 CDB[c0]: 00 00 00 00 00 00 00 00 [ 498.439537][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:56:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x400000b1}]}) 01:56:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='+4', 0x2}], 0x1000000000000261) 01:56:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x3ea) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@sndrcv={0x28}], 0x30}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 01:56:53 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:56:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x301040, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 01:56:53 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r5, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@remote, r5}, 0x14) r6 = getpid() read$rfkill(r2, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r6, r6, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 499.074553][ C1] sd 0:0:1:0: [sg0] tag#3432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.085245][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB: Test Unit Ready [ 499.091853][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.101766][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.111651][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.121602][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.131453][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.141331][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.151203][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.161045][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.170907][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.180745][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.190615][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.200474][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.210316][ C1] sd 0:0:1:0: [sg0] tag#3432 CDB[c0]: 00 00 00 00 00 00 00 00 [ 499.230394][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:56:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xffffffa8}]}]}, 0x28}}, 0x0) [ 499.370290][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:56:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='+4', 0x2}], 0x1000000000000261) [ 499.471026][ C1] sd 0:0:1:0: [sg0] tag#3433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.481653][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB: Test Unit Ready [ 499.488407][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.498291][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.508137][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.518015][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.527879][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.537794][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.547656][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.557501][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.567350][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.577210][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.587068][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.596934][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.606757][ C1] sd 0:0:1:0: [sg0] tag#3433 CDB[c0]: 00 00 00 00 00 00 00 00 01:56:54 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ptrace(0xffffffffffffffff, 0x0) 01:56:54 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10000, 0x1) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000d06030000000000000000000200000305000500000000b80a99e59aec23085b0012000300686173683a6e65742c706f72740000"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20040044) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$netlink(r7, &(0x7f00000001c0)=@unspec, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x5}]}}]}, 0x3c}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 01:56:54 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 499.704447][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 499.740568][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 499.796339][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 499.849811][T12297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.909177][ C1] sd 0:0:1:0: [sg0] tag#3434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.919888][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB: Test Unit Ready [ 499.926732][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.930544][T12304] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 499.936627][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.936804][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.964295][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.974231][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.984138][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.994061][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.003978][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.013878][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.023818][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.033723][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.043622][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.053537][ C1] sd 0:0:1:0: [sg0] tag#3434 CDB[c0]: 00 00 00 00 00 00 00 00 [ 500.061556][ C1] sd 0:0:1:0: [sg0] tag#3435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.072249][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB: Test Unit Ready [ 500.079022][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.088930][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.098829][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.108732][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.118640][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.128580][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.138495][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.148401][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.158307][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.168226][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.178148][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.180796][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 500.188034][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:56:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xffffffa8}]}]}, 0x28}}, 0x0) [ 500.206225][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[c0]: 00 00 00 00 00 00 00 00 01:56:55 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:56:55 executing program 0: semop(0x0, &(0x7f0000000200)=[{0x0, 0x1}], 0x1) semop(0x0, &(0x7f0000000000)=[{}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000380)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:56:55 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) ioctl$RTC_UIE_ON(r1, 0x7003) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:56:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0xb, 0x6, 0x101, 0x0, 0xf, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) [ 500.403537][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.467517][T12304] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 500.578709][ C0] sd 0:0:1:0: [sg0] tag#3436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.589360][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB: Test Unit Ready [ 500.596203][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.606062][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.616028][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.625849][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.635762][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.645586][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.655504][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.665468][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.675340][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.685195][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.695019][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.704846][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.714581][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[c0]: 00 00 00 00 00 00 00 00 01:56:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xffffffa8}]}]}, 0x28}}, 0x0) [ 500.780208][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:56:55 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r4, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:56:55 executing program 0: semop(0x0, &(0x7f0000000200)=[{0x0, 0x1}], 0x1) semop(0x0, &(0x7f0000000000)=[{}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000380)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:56:55 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, [], 0x1}, 0xfffffffe}, 0x1c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() read$rfkill(r2, &(0x7f0000000080), 0x8) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000380)=""/78, 0x4e}], 0x4, 0x1) 01:56:55 executing program 5: unshare(0x400) r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc, 0x2) 01:56:56 executing program 5: unshare(0x400) r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc, 0x2) [ 501.111474][ C1] sd 0:0:1:0: [sg0] tag#3438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 501.122256][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB: Test Unit Ready [ 501.128978][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.138903][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.148751][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.158666][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.168517][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.178390][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.188262][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.198147][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.202532][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 501.207999][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.226179][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.236041][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.245920][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:56:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xffffffa8}]}]}, 0x28}}, 0x0) 01:56:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x4100) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="35116e97e69140f065380000002c0027ff00"/29, @ANYRES32=r4, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) rt_tgsigqueueinfo(r5, 0x0, 0x0, 0x0) [ 501.255771][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[c0]: 00 00 00 00 00 00 00 00 [ 501.339227][ C0] sd 0:0:1:0: [sg0] tag#3437 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 501.349853][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB: Test Unit Ready [ 501.356565][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.366406][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.376251][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.386083][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.395912][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.405733][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.415541][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.425362][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.435184][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.445001][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.454816][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.464559][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.474388][ C0] sd 0:0:1:0: [sg0] tag#3437 CDB[c0]: 00 00 00 00 00 00 00 00 [ 501.603560][ C1] sd 0:0:1:0: [sg0] tag#3439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 501.614281][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB: Test Unit Ready [ 501.621229][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.631184][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.631375][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 501.641055][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.659256][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.669198][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.679186][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.689140][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.696618][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 501.699086][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.717097][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.727067][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.737015][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.746965][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.756919][ C1] sd 0:0:1:0: [sg0] tag#3439 CDB[c0]: 00 00 00 00 00 00 00 00 [ 501.806735][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:56:56 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:56:56 executing program 0: semop(0x0, &(0x7f0000000200)=[{0x0, 0x1}], 0x1) semop(0x0, &(0x7f0000000000)=[{}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000380)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:56:56 executing program 2: r0 = getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") rt_tgsigqueueinfo(0x0, r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0xbf, 0x4) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001, 0x80000001}, 0x20) r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='/dev/dlm-control\x00'}, 0x10) ioctl$FIOCLEX(r3, 0x5451) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)={0x7f, {{0xa, 0x4e21, 0x0, @mcast2, 0x1}}, 0x0, 0x6, [{{0xa, 0x4e21, 0x8, @empty, 0x3}}, {{0xa, 0x4e21, 0x6, @loopback, 0x3}}, {{0xa, 0x4e22, 0x9, @local, 0x5c1a5b25}}, {{0xa, 0x4e23, 0xffff, @loopback, 0x1f}}, {{0xa, 0x4e24, 0xfffffffd, @remote, 0x6}}, {{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x2}}]}, 0x390) 01:56:56 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d0e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765030000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) fcntl$setpipe(r0, 0x407, 0x101) r2 = semget$private(0x0, 0x2, 0x0) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000040)=""/26) r3 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:56:56 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a300000000008000340000000000900020073797a30000000000400048004000480080003400000000814000480090001"], 0x1}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:56:56 executing program 5: unshare(0x400) r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc, 0x2) [ 502.248951][T12365] __nla_validate_parse: 5 callbacks suppressed [ 502.248980][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 502.264729][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 01:56:57 executing program 5: unshare(0x400) r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc, 0x2) 01:56:57 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x1f, 0x4) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r4 = getpid() read$rfkill(r2, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r4, r4, 0x13, &(0x7f0000000100)) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000080)=0x9) ptrace(0xffffffffffffffff, 0x0) 01:56:57 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0xa, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000003c0)={0x4ac, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "647a0728c551681bc21ae7d406d920dcb88b2ef0256239cd"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "363990ebbb68ae1cd00e314cde2a36576ac1800b7e8e39da9fc7003bd7"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1095f055090781c68b13b509980d7e11b3feea13bf9842162065d77d0db5d7ea90e4eae9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c08c401432442c9e4aabc940d4cfcc500da0e61c4655"}}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfab5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd51}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @local, 0xac}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd26}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x79c60000}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcf2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf2}]}]}, 0x4ac}}, 0x20004090) 01:56:57 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:56:57 executing program 0: semop(0x0, &(0x7f0000000200)=[{0x0, 0x1}], 0x1) semop(0x0, &(0x7f0000000000)=[{}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000380)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 502.528972][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.595441][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.602359][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 502.602485][ C1] sd 0:0:1:0: [sg0] tag#3442 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.622064][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB: Test Unit Ready [ 502.628806][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.638652][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.648543][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.658400][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.668250][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.678088][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.687930][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.697859][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.707710][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.717552][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.725671][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 502.727398][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:56:57 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xed) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 502.745712][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.755735][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[c0]: 00 00 00 00 00 00 00 00 01:56:57 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x81) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000004c0), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x1ff}}, 0x18) r4 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r4, r4, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:56:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x7, 0x4}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) [ 502.987200][T12386] input: syz1 as /devices/virtual/input/input7 [ 503.022778][ C1] sd 0:0:1:0: [sg0] tag#3443 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.033401][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB: Test Unit Ready [ 503.040150][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.050066][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.059973][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.067348][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 503.069859][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.087868][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.097780][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.107680][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.117572][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.127458][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:56:58 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a300000000008000340000000000900020073797a30000000000400048004000480080003400000000814000480090001"], 0x1}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 503.137353][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.140909][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 503.147238][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.166307][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.176180][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[c0]: 00 00 00 00 00 00 00 00 [ 503.255311][ C1] sd 0:0:1:0: [sg0] tag#3444 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.265920][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB: Test Unit Ready [ 503.272533][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.282379][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.292412][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.302291][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.312148][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.322039][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.331882][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.341749][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.351643][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.361520][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.371363][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.381222][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.391013][ C1] sd 0:0:1:0: [sg0] tag#3444 CDB[c0]: 00 00 00 00 00 00 00 00 [ 503.414853][ C0] sd 0:0:1:0: [sg0] tag#3445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.425449][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB: Test Unit Ready [ 503.425957][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 503.432044][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.450185][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.460043][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.469913][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.479770][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.489650][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.499503][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.509379][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.519672][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.520182][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 503.529492][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.538794][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 503.548475][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.567429][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.574165][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 503.577289][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[c0]: 00 00 00 00 00 00 00 00 [ 503.597570][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:56:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040)=0x3, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400074aafed23b1e555630005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r5, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r5, 0x4, 0x3, 0xee, 0x800, 0x24, @local, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x700, 0x6, 0xa2}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r6, 0x2f, 0x7, 0x5, 0x1, 0x4, @mcast2, @local, 0x700, 0x8000, 0x80, 0x5}}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x5, 0x1}, 0x20}, 0x10) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x4528, 0x4) 01:56:58 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 503.919316][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 504.052845][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:56:59 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0xd, 0x18, 0x3ff, 0x20, "0da0d1efefcbf11cc41f1b98fa2e3d5d02224011025e992c685c581cd0190b95"}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 01:56:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x1c07}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/215, 0x27}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) [ 504.264541][T12386] input: syz1 as /devices/virtual/input/input8 01:56:59 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a300000000008000340000000000900020073797a30000000000400048004000480080003400000000814000480090001"], 0x1}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:56:59 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r1) r2 = inotify_init() r3 = epoll_create(0x5) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0x80) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00007a8000)) r4 = inotify_add_watch(r2, &(0x7f0000000300)='./control\x00', 0x81000050) inotify_rm_watch(r2, r4) inotify_rm_watch(r1, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r6 = getpid() read$rfkill(r5, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r6, r6, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0x8d, "f8f860a05e31e79cbca707b5eeb9f2f0257e28ebddad75a34938036d2d2f096f58e45414b3a3993ab98152a78b444f7995f5b79e8b2a543845021c3828e3d8798144c83acfe77bcf0c54a02874a73cac89be84b4279aecda4f19f931a6b8e4693cf340902b6433c854796ca4ad066d8e69c5eee5e9f2c3970646c649b6ec3197b9025c218fc0e0f86d580697bd"}, &(0x7f0000000040)=0xb1) 01:56:59 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:56:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x1c07}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/215, 0x27}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) 01:56:59 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xed) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 504.666411][ C1] sd 0:0:1:0: [sg0] tag#3446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.677115][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB: Test Unit Ready [ 504.683747][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.693624][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.703474][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.713309][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.723136][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.732948][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.742748][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.752560][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.762372][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.772191][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.782015][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.791820][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.801640][ C1] sd 0:0:1:0: [sg0] tag#3446 CDB[c0]: 00 00 00 00 00 00 00 00 [ 504.867435][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 505.043961][T12460] input: syz1 as /devices/virtual/input/input9 01:56:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept(r4, &(0x7f0000001ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b40)=0x80) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)=@l2={0x1f, 0x2, @fixed={[], 0x11}, 0x8, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="813cbc0ec0d60be3df8876e201cb1f9d46e6e26e3f73c48504226b2d3b0ce1b1db5f4668138368d6f1469fe5b2dd9b4a695e2a71e4a657b296eff5a1573ee69b8c70fc0ec1ffc6c0600e63af08ed0be59c42bd63b28944cfb03ed2750e862c17c5ed3cf57e04a5df3e1b42092508d6f70da690fee53e4f12c75a99de36066d8610f7726eee3b3d140960b286130a6695019061e3f701d50ceb42c36ffe", 0x9d}, {&(0x7f0000000140)="1e9506dd185ed618b823a95b90bd2d6b8bced967622da053bf4328f1ff55662c347e70e254026cf57e044907695d803c95fc24e1facb31854cb3411add242304810ad9e9555eb3f62cd70721c2ea4e94a44d88902a1b84eb3dd355676f10e7aabd6682dc9bea5378d132be176214749e15b953dcd156170c39f30d313a7e41395d7f8728fa968cce8879d824587af117f7af9860a66715074936a3cd33527f28ba2966df71e5621b840f4d4b9245a59b9bda2532e5b1fefa3d54d11a5837df2f2e579dd94c99e9785fce2de3a2b488fceb7dd6d1531ef372100d986e6e5504e7f0629ff1f88dbf63", 0xe8}, {&(0x7f0000000240)="76a4c8ba55eadcbdb8b1e1628f71d2efc9f8e21aec39124f956d4a73a088ebfa591d67207a1946ebfce286e365af566282401bc743709b6723b225e795d04a20a8e669d4fd51764500d8c1235be06f6e0cd5e35e30d03cc795b042e0519c6132be21a714063ef3d8", 0x68}], 0x3, &(0x7f0000000300)=[{0x78, 0x105, 0xe5a8, "75a4045666948b40341dd9fa0f2e48af5d775e06f763b25a53092424aaeb0be1fef0616fb350b0399ad724096505cb0fa26551577856fa1dda3b73396d62209333f7b0c62bf1caafdeddbb847134f8ccb4e3bbf4d4f14886f42fe327d757e9e608f1"}, {0xd8, 0x3a, 0xba3, "dd4c111eed9bcafc69f08466635c32e6ea54bcf4e5b8b0f24b4b09a06e461ad383974f3f555241a1bfb58a6446c6e7eb7fb878a2c39dd581f7b603c8b62ef675021fb21923df5b6009df4a7ee667563c690187662180f15f888b1612d5e901994d620137aff06a2856af53efe4f4c3e4343c16d52dbc92f581173c785fc1311fbf97864ecc935fd131c0b590329b45d1f18e3e1cc8b2fe36eeab1068ddec2a9e958f15f8c3998f858a959a4a0d787f119cb1ca6cdc0b416a1cb7d445b920cfcd06ad3076ad"}, {0x68, 0x117, 0x69113010, "5b7d2e7f78bc0728d01787f6f24aafb8e3ed99815839c0c68778eaf41194b6085c8d279308ab9a69cdf8e02b33ba3c20fdced190e5725228b132a69d38bf73d8e0a66773ef54e3e19b5e12f4928d516ac33d1b5c7e"}, {0x80, 0x0, 0x3, "fa6ac3649f8d34055a25ff21ec19d030b673e0186ff0da2f9532f60dcbcfc29b082b79f20d3f03be68466a633d278f87f4f9762f195fcdde90fd023889f292da216583ae59e0cc1f69a8d9c0b27c96159fa54700ab5bed643128b27210c78d090a27d7b78db8ee98e0"}, {0x28, 0x10a, 0xa8, "8176097253d979544d50ba77abc80db9376bf36998"}, {0x110, 0x107, 0x79ba28e0, "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"}], 0x370}}, {{&(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000700)="097a8f49457562549d417152b02eeb012efe67fed4b26316a1653921b4cacd0e49598413e4d46dfce04208f9e3dc6a32511cee5e289c53e75df039b47adf27dc7900595fcb1bbcd8cf2941a18fef1861914c9bd2661a8f7eb45d89cec105e3e58cd0902c02fcce0518ffaa8b445c291b53166b7ef0deb3ff6a5a3c45d88e593d0846acba20e010d9ed8f2123fc948b5313900365744c53d9f02ae67aa5ed2d2d2324abbac37d", 0xa6}, {&(0x7f00000007c0)="f7d751d1be049d2366a8dcb8959a52cd3febb941759283aeac48aeae671ef18c4b6625576e0b40724894805ad346d1b996cde76f41d95b7f7e629b", 0x3b}, {&(0x7f0000000800)="3dc3756f5868ecb03a1e712c1fbb9a", 0xf}, {&(0x7f0000000840)="e1c21f31735fe4e1f5f576d6eb879a1b9083233eba2eda4fb8d9faa556ebdbe455a05ec95d4e8f31ec287de544386f6f74f42b910ce94f17d05e12ce917998ecd78abbf9b1a67932217074784e82476ac5aa4c5f4b49082005e57db663e73ec74b1023e4a3e295336bceb48013ae5efcefcb940b928c9d15159aacacc1a2f5f7a2080a0cdc203e6b4f29484675", 0x8d}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="bd62f5e60053169380e50ee489a967ed1bbc9d48bd3ee3598af6e6aa7ef93baa8f743bc4d7556e69bcc6d7a09ba625692ec9dc48e24630caca9a195ee8fb3a41", 0x40}, {&(0x7f0000001940)="adc68b080dcb16647ca8a868c13d6bd881b1296f24b229203bee897fa373e97d8c7e7d518b167b2ac4c44141e07c4482c70c5b6b6bc2dddf", 0x38}], 0x7, &(0x7f0000001a00)=[{0x28, 0x118, 0x67b, "f6b3408de60c6d724fb1ebea67137e2bab79d7"}], 0x28}}, {{&(0x7f0000001b80)=@can={0x1d, r5}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c00)="c1d0b02ba61a8804b71385349822d9198b3aa9533ef14e1914a89735c4db3485a0664be8b936f42915b55622d65d3d7cd636ce74107c75d6f31922df4e8d41c2b2827ade12dbdd32e438da2941f69dcff2dddc95e0891e0544d4e308d09dcbc72f6297fae57f422c7d179606adf2e8f60dd21670d9ed762cc616a581437e365bc7936a062161f73ca01ce3b8deef268aaac251742577a437760b73f9a749c28e574e4522793dee2b2ba9223e2f433c93f91b4c9544d2741826aca4", 0xbb}, {&(0x7f0000001cc0)="638244c8ebda48a908d31d6843458336676adcac415dacd7008c9e0b3c5b0ea80be569dfa8ba7881553238e67860ad690cc85721de71c911719c76ac68d36d6ac179580b853bcecd7fd0f3d68d6db7963ea775e7571746a861b4204bc4b68447559fe750491232b07fe91493a4a0eccb3ed0", 0x72}], 0x2, &(0x7f0000001d80)=[{0x108, 0x29, 0x5, "c6b3b9b77d8b7c3507520115b342d8db25179add50dc6b3bcdb6a0adbc9799c54075a3fe82350cf3ed98918b32344e80d1649b87f8ad25ada6eca087778887f715528a31f6bd88a88544d37882f2b483d3b480ff62c12cce9d3595798d7e422354e89ef72ee88a25ce2842734a93b80e272bdae0b5eb528f955e868efe4984af4f966e9e6a42ec8a9b14955408b32e16548f14a74131b6b83b0ba9c7f5fdf1c43af711418cef7f878c487c0f88239f383b40ec37429a8cd999250daff3094d672efc406b3fe341bc4ffa6ff95e824326cab1bc6652e488348ade7e8753a76c6ad1a8b4b577588460d926303fb65ae2746d500189e12e"}, {0x1010, 0x110, 0x3, "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"}, {0xa8, 0x109, 0xfffffff8, "b035b3784a877d9f9fdc316f839f1776a612a721860f547eed9f280669d73ef8708319819b089008a5245b366b78f00dbb47cc9beaa78c29b8dcdd6c5e8b969950c9c72b78ef757846e4477d383f0d88108638ed8e93761667ac9bca62414d7614c36ae5d9b4df03e851a88c02beafb702b81922b2357c246e7e366d62d542688710f21ba60824be90c52a5298134b02729ad4a4"}, {0x50, 0x11, 0x2, "b8012ef5174f7109c7c72d9e59c0b1456226736f8384095d98d3f4337a93cdf512fdec2614d800a8c13bc2fd1c2b38825a8817041e21a11a22ea8e"}, {0xa8, 0x77, 0xffffffff, "f7ffee6f30491534d6742002c053f2b2b5715c0ffe31bb4f5e51ece0fe84cd9741c0d033b4a8d103e6157fe4d39ef5177ce78dbfbfed2773d0f98caaad29c6cbc82c21a21ebdae7a816a71ba561808e2ee2314b7f8e14a4787484702ceb04166c2dd48e70a19027f7b684890f6ee50bfa05b728bf87e252c264ca0e74b553d79838c847eb50bed1a4abaff1287ea3e1caa"}, {0x88, 0x11, 0x0, "a31ae40302877faab9699b5da9c10198c9058658ac2aad9fc7d2488c9819b8c663b62d21af94e6f6b4a3f349cf0345fc82d04a1d043ab648be8bec0e0337d994877631033473f4d22a5716ea1dc394d94726f90bdc0b733ef22ae29fac2001061a16d6e9669f509fde240fec88edba0b82"}, {0xa8, 0x107, 0x1f, "df88e4fa6a2d569c460ad561ee2c10f63aeb4939586eb6e716900b9493b372a8a42d159300d8e6df9cf58bca087470969f3a6e133903ad3496c1a87b3846f70d640e1b8aacdd578f8fab8782e991b63f6b155992b3ffd0cf106b71f81dbe914c07f907e76c275ed35fb7d2189d9fa0ab3b7acb8e86735ba651c184f502cf8d8822dbc3a436e320a9959ac7b46130517ffe3a"}, {0x110, 0x103, 0x5, "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"}], 0x14f8}}, {{&(0x7f0000003280)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x1, 0x4, {0xa, 0x4e24, 0xa79, @dev={0xfe, 0x80, [], 0x13}, 0x91}}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000003300)="fbbc08ab5717e708af25e5", 0xb}, {&(0x7f0000003340)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004380)="d35743891bf90652f91a4155a39b675422af09049eab411a32d57ba27cebda039ccc20b5440392742b7245054a5dc57334fcdc0bb3a7a12b013c4cb1aec89995ed0a495de297bb5fb048ef1ebaea91cce3d91757360384cab2f9753815fad0bacca841997e2e6e0d71ecba37fd5278c94469245fac87774c03a13f76600a52805e2f92d7684783c58402cea2c58ddc94c1045b833438561a9baa9fa914b2af2a8012080f6a2cb54c8f98e73144998b1bf9", 0xb1}, {&(0x7f0000004440)="9610046d59e7026438d40a79b87c5c18e04c1d78f3c3fe85ec1f9f98fe65d312997ee1ace840cb46c0711e74cc1d4d5b3f89dd617cd221fd31499045249ff218324daa249eee3219db43d59cfd62800799ff239bf7850a468bd82d91a02430c9b2f7b45e3fea683fc9b8e089dc43354baca5b190e108deab9c6a7755c8b96387987705f3e3e819c65a5792f47eadcf77ef369742cf7ad88eedb0ed61b76ff424df05f04d5933b20208e610bafce406981f1548396a28f8770054f275b6ca69e9bd11f8", 0xc3}, {&(0x7f0000004540)="97ff5ecd6b766b4da0cc0fbe9dd0bba9135318c550876a2b050e9e", 0x1b}, {&(0x7f0000004580)="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", 0x1000}], 0x4}}, {{&(0x7f00000055c0)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005640)="ca7793f8ba2f68c1617431e0ced582171feaa3d5fac5de4e18cd93f2d70b6640f2882ff32b4789eb444c8474610c01bec10a34e650311b953c07806b66c8691c1bdd2091d603a9e05e9f6e16fad906b90d7bce8ab6289d83cf69f9e79b97a1bbec3000d741d4de78dd99979c2e40d3d7459631943295c70db098ff832708ce8ce3305453366e9a5765827f832df4a1fa4339d98c48795b91fa07028eeab7428306c1b3a3f49a90bb980db097a082fd8e007940989f3f9497a51222756a", 0xbd}], 0x1, &(0x7f0000005740)=[{0x108, 0x10c, 0x7, "4274e4bcf2b2a5ffced9114a29b4963ab30efa84c0b34d19d40f8895aa24c7835100bc286fb6c5b6ae0d2274abda2159054dbc16ca860e6e7f7b3c4cf284bd01fd5653dd7f82be0d6b2aa907ec3bf865d2783ab3de48e465822816a010d0fe27e97bf5915f5defbd62708ed0a4eed4b081cff5730952c82354751827e7617213442f33c7a01d189da230f00119aee3789738c2100b42083e5e7a1929757047da07c1747f16aa32bcb7bf34bfa833a88e0b36d5ba5e05aacb843f59643bbd73eda56f21cf1980e0fbc7ae64a874192a6f44c6fbca5193b3c77ed14cbb3c2014f22641623098ec845ce825e7d34178fa7735250e254a9496a5"}, {0x90, 0x119, 0x1f, "bfa6d855a093d5e74f175423c40b9c04a63adcc1ed4653164b77447a62dfb53a3f79a22e05dda1c7872a15d5c2a6cbe25ad58cc5c10be8084bfd39b183ac6cc14676b2d243acef1df7682109cc9e9c493e346bc8c281099e7dd1baf6acc67880f11d8a260ef24e99fbfd6eff8f987985266626821532139cb87d"}, {0x48, 0x3a, 0x2, "6f128fdaf4fed61e14846a94ab955c5f59c27b231458650e45282b2dab13593ff8778d3ddbccdecddabf093261afe306bdaaed7f"}], 0x1e0}}, {{&(0x7f0000005940)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000059c0)="f978c5f3580c388aec355e018c9eb10d89d2b999853ea001835e0e825235f9e93e0b8a0dd9c1d903eb841d843429fac64b1e1192146466e2fc902ac839ee89b81814f6a136b965e8b11518cf12dd46eff7f95867d24548c4be4fd5de3283561d7e405b18d962fbbce6e576ede36e3dbfc176af771f", 0x75}, {&(0x7f0000005a40)="50a64422f374cb5a59b1fb2bc06829069442170ec1cb976d2e1ce75f6b4cddfc7e439b171745b5f2771844518ccb3fb66013925500a51fd132bad1ebfbba966f455d2f3433899a2def536da105394643fbc5dae53c404126f3d091d84b51b39e96437800d63f644b94bbe0f58d9218ec8d0c90afd42afa50c975b52657c2702c38aec795d13eb4abac7e9d00fcf9e04d2a41436454cafb58d66c8b0a238bd3d8a705d201317d9fcbbc6c4a50d2484fac448c9d6dfc6b5e6e5986e691ce4e40efad1d40d54468e9a3faf4ad1cc9ea1fc4e7a75bae079353c5768c019c1057897e699210e07d7786ba0922689c2ece0f9957721654af7e3e923d9233815a3b9293a96a425f13cb417e38bbeee59d2ef0e267e64c0116e47e30b8fb648c87da8d5bef0f02bde6166b2a42166bfeb48f10e99883ead6f4d933fb468e63bc95062e1e6c9a520cf72fabfd72fa41fb00d17c3d3a28b804c0f94ba616f89e6adab7bcf2b0bc0c50970e83ed1511c7f9fa551d513adf82ac6b9e02e6553339b1b0833fde650efeae3afb38ed9e6370b395565108a5bed52ebc5353e7bf48371a30756e96b98f014759893a0ee7b16189e042a058433cb1685e90d66246df81a3b5e08d78d77138b0c73c64d5fc9761b3709c2900f9e07ff0b94b2693907921b0890dc298e4f7860e8377084d3d3b805aa848e175b4c7939d7e2f840f8dc2bbeedaced093f766f46889a9687c9ec7a00d43333e7e18c7ef77890e928d9d494e02490310ec7292ae86efa09c9744ae9c9a45ecc33e7108df149b2d0663249a7d3e44fc53cf386e611c594af6b23ca1a63d1e91c31404e388367a35ef6c74217160c798a4cce37f4bab788b54a45711235fd304be5135c7cacd1b2e7cb10afc713246d8519c95d5f799f120917afe9984c57def3aa0f2f863ff5459cc6aa7704e6c6d2cc69766d4f209b75681423a2ce93d5476b9695c94743e879aaf2ede798aacdb93e0379bbb3c87a7c2dc6b1e26d40e36cecd1b8568210ddbc18c2d4bb2bdb975e0c861afc076502e6df6d2122d791ea9695aecd9285bdbd97fd0dfb9c945a4e67b21897b86c8c41a1efa417bd8138d372a7a141f94d4f0d4e718c20384596f5b8423ec9c599c33e072b18c824a6617ed68c8f894ce41b61a43651224464aadf2cf6b2dd182e85c8c21e80f858d36ab0c5495ab414fc2109b98dd34446f230178b1256d7e47429c01bcb3272862060e8fb77a0cb23080618ff7bb0c9fbc9dab396060ae603784b1e48759bec876fb25c157c1ea1f80acec73241bd70862551accab0ea63b45055b2fff573f65e96c4f3eea6901c01fd8b20302fd973ad997c4f41169692568e40b4d0a88c43fa5738401f9e51b171d67a826a9a9319e57d8849275ad332983165b0813af2b90bb655310c7e96d2084ef32a48254b61b4948aa941700147bdb70b464138db8911a5325e686d364c62cee2755f1814020fc7bc96ec4a2528658459b2d38bd14596437ca0b84841dcc1b49557f06064205a3faf024af00adef1adcc42d2390a34da5a0f3f6d4451ff5641f678c113075d2407c1179dde78d1236b74bba04147bfce57d6635b7303d346dbecbab934a507176654f129fa4ed9f61b670022c8f00bb3c57e398fd9fd1b63f4c20deeaea7d5945b440211526fa58819d053669d65879af9f74ac90c01389c47b7f901f6bcb60d64933e7e2b64d800bcb503e57a755a85e386ac8b3629e31f035003ac9bc92c1b0d8b95c53957bf10eb759c8b723a8cb231d5674cc169f2b8d836ab5d57e569bdf28d37fd65f5042128ea68925c48fe204869d204e815da8ef19f74f13416c311bc72eb9c7be6e1f02b496e9325c9f67f50bb1973be027baa765215dba6608c7171dacabd3e633de436c78c275d919707fc2a45a7f9bdad54bf5b643fe03496c9349876e175dc0a6be293a858652ac4de5ceb33bf4f10722e6278c33d2c618ff5654d9ea59a4cc96d0a19e3e5c20cc9bd88e52b8da9738bce017d1b3683eb34606ea49b2032a70539f9cd841c7f96f0b90f0c194b7c168491b91389d139e1bc79db01825d1fd3e5acc607d3c4447932e67e5d8ea62ef697d016d5b48f9644711460972ca2861c3d6b6a1198893888408bdd59a101e3db5fb9dfb2a7ee48f2c0a213ee902837351e430e8b26a0c14e33f072e66bde8d71f6f1ac591a986bdff6879c97bae8ab8a6c58dfb6702d7d88112a4a0c9279ee2d58c86abda409364fbf6407a9d27446e09abd1036d340ce5f6c32c6b2d74954107b8cd7511fa172bf463b82957bb5b9417b546ff59c9d1b69564bfb82f0e417b24ed95e57f2b06c773a9c9ae3d78de46775f688254c4f0e7207c36215f5d6f7670e8e02520a4449e257095c9b302b987875399a545f4430b8c58e7f9e01df7231fd4730728e9723dccb087a16a9e7b44d49e01674b3db28f9a014503e6cf550f31ac19980b118695b80a94b7f7788e508ecb34716f87d7fa1f83682aa16f69fa180322d680047211e1cabdfdf7b03718963699a23293543c08dba995ea7ac297fd155fb079d1d5d874ba893a16497335582a3b6b03e950db655ea1e4912e1129e997fb8d3531bf699931ea5efc1cbd1ad3e443df7491643b2f1f1496ee693de39a962e3cb943b26381d6ec00ea04d3e583194674ff37bfa60ef9e9564aa53cb83c06cf3d4e6c0b3de8b02cee71f7ccb09b27a12bcfb188a62f68b57b45785805011fc589e00e2af8ae389ae3cc3344a354b45559e8967e5d0ea5323923329d935dd2484fe943f78d781fa16e67f87bb8c9ddfead8daf3c1f8bb17f3add5f908367bac58d9a1e04ca8ef0551eee3f7322a6024eb8d6683152309198e76fd110c70c6fe20524d8c68a40266db1dda59ad94db89ffb1847fee21c72bb7e91ae719f62b1c8d14046317004a58cc1babc7701f2c976ddedbd186906db9f62257838ddb3599896b3fd4d97edac6714aeba90d5ff9f381515c9b944725607846f1b5a731670df6d5d58219045505dfe9972dd8fc7ca7fe0a6c55796a3890552bdd2dcf3559eded81d86f4bf0f88c26504d55de37dc902364026458c4f8c51f51610d9a13c22d27c6c6215849d70e352a38ae661b0d22332bdecf321bcdba3c85862754b5b21296654ffc272c0c7ce89f57ec6b448a3d2a119bbfa8cf137d8d17ca9749fa55fc37dd99477afc9545fbcb2bca608e2d03d19528b052447c511b57c5db5e40a87276e5c1a0757c2c65a4be92859971aa51528fa68e353e3271f4ecfd5c8baaec0bfc8e58b85ca93a313261d0df3453d6319140ff3d5cc7149a9729110cba9ae0b6182ee7353d1739b9296dbb4c8c7a8e7cb071e8bf76c1b55d6098418b4a8d82275b91988da9b0e2f54fe34a633f0aaaf131101b2952a6cefe648785b09daa5277bf8b27b9ecc502cc41b9b3108341e900ae2c16e625a1db06c549416fe467a78573867008fdfbd3aeb4e12d42aad857f01460ed09d45a3b106d1bce16e80f8df0edc76705075f8a8db8ecd2b48f865a296299d14a6d16baa1d192f323603bb18e1200e24f8e23d1e2649c948590fc6478a922f613aa6187ecfa5350ac1a728a7591d287d84b35de2a9dee8c00009985fe01005db7816fcf5ff7e7e87bbb66963f5fe6cf1f55b73859687464a8d9298ad6e4c7821aa107b13def185ad905a0003f1b43213be63bdc76897b1053272abfcc337eb1fc684630c820268eb7cd4368bedf0dfe41538938907b4ae1ef20260781d8e00176af70dcaaee5aca64595a27281545733239ad0f8b0a004ef5dfba41b0468b6cbe5a5a8ef8fe993d40ebc8eb627bedf0f064f0685c51b0e24ebfde5b38d6c0121440236c5bf5a696c47411e64ed5f9f2f61e39601b0a0449970354b77c0b4a2cd06f3fefdfb9961a91f9d97447bb3af91d4b5592d1022ee8c15b4ccbe4f214754b0486f8f133c5aa2e9953198c3f6f444e6d716fbd173301b6c727a4bda170a1b9e408f01ab01415d0c5b2bc2c53510c74d39decb7ff5fc443b04593c040eb9667ee7934b571230bae933f15b2b47e0efd17464dbd090ad2cb6722a3e1d443f37370529cf7ce4f467e93df9d36b2052f277894abd586c2bc182967a4bb3e758c338f95fb2d8d68977d9a1c32040031985e1fe9a21f0cbf29fec83f9bc8790472cff95e3796a42b1d0980b07059df2dc099c59403b866a9e5c9bb6a45abd4549d77c22a4dd8e4933c3cdc3205b6ca7f4dcbc53318ac3f4009c5df1f03176ee123459cdd27c4928fb4e74155dc770723040995620c21897ca69de3d2ea2263c2211ecf166c681a439ecd3902c23f6b721d7336e835add261184506f1533dfd1c7928a8a891dcd8d549e9c6452892850885a9197e96a8f782d895671fec1ec6349b699b8e3fce4ae273347f71d3b5c1332b249bc05b995205b89c9b07b7ced5aa91b95e9f23481059b6fd3de1a845b45c1c3eb95e8d2ad65a5f570829cd9e370fbcb08737e4a3bd6f3e678ecf96f4a1fd94e1eab7ef5391e201709714e326cb924c4965d117913767982faed87eb70baa30590bc5d4c111c47e3424407cb3d8812a28eff65c33dee561a30d141914a9d2a5f0f0facac923c6726c62e3c3ee96dbe5fd3ca1ddf6f6f9b463200647286cd2236ce29c5831c4d18584918316130263e16e64246b0acac6bd8266df35560064b2961f3762be190c924eab843ba90f8d866d9693342b5469358c66ed402927e012875208b39bd1127c4d4e8dc123ecb1e8f4e9094e503f0214c27eeb679759bf51d6cf2e6f41ed33b3de714b56c5ca467e3fbb84b19f6efc3451ffb493e73e29f8ff2ace4c3a7b12007e24e2af59c666160047a9693d3efc3b2509c45620ff3384904e73efe3f381b2febd228fe7e03855735b2f7d5086ad80a4afacd79794da8f538fa39e109c0a22ff5242ba430b0f1db0bb98bd931068331203b1773eb907b892bd8bdbd2f68b0d8b1ab1df578a36162586fc184821bb341c78a4e7d4103f3a05e6eec0eab620f87ca2cbceb02cdfa22cbb2a330c5cd1eb064511ece540c30da6f267dcc1a4a08078fcac7b19aaaddc74b06d10574155497e80b14af6185d495b90af3f637b6e2f04ab6a04af1a5b25af5489cd461b95f9cda31af4c846e0bb8e56e52ac7cce5a00895590dcb698ade10fd2b8689858c00ecd1438ac237e7b9a517e13283f077413b4342e28103a7529197ccab251fb4fbd6b34d7524624c1f2f7eee5250b007819244f5e31c558aad101e8e323ac666b6326080d8512b0b6cf143a6c8cf563f4a2bbc577bbd422683edf2a2fbae6a530760e10a986e9f173dd71f38b393ed7fbf4b4bd15fbe4e75b84fda922f993224f28c5aa1b671452f1800dd664fba2a332bdb216bcbb3665c789fd70e7ff8424e5097451182da5a6d38bdf28ffb54d0cb160f56c1c5b5767aebedad4eabbba706539d9d15b124fc409ecd7f8b26341dc3b1ac52449fe1d20e5a75fd7e96366d2fc15f1ae28261813db8184bbcbb9227a12a9b50b93df73c285f2fa2b1fff59e8a6806d7cabf1e302c10fd486fe9af8627caac711cfc9a4fce4540385c1c86ed2603a818836c1a61163eb49a4b588c379c024a64846151d65b40f828bd3e9162d4c9f08dac8d4cdbb7616c4e8dc02f7e7a45377dc75692a7993b1875f53637bb8a8139d0404ea9e73b25bebc3eed66c07ac13c4380645ed4a52785807865e2802894c91f91f24ef1d30606b3ca86231ae513bfaeea9996b9aa9263204ac6d667bad7db880903509de5bff833752f1c02754db2e9ff5", 0x1000}], 0x2, &(0x7f0000006a80)=[{0x20, 0x10f, 0x100, "df08ecd3f0d997989219236a"}, {0x48, 0x10b, 0xcb000000, "7ef51d03a414a18a0110c043154ce595c57559c642ae9a2bf41335a73428ec9086402b76fbd3dae7eca49df41977f8394a61ef36"}, {0xb8, 0x11, 0x1, "8b73b04cfa65b6dbc0314e78919e5ff77cf87e51c3aaf122d32766596c5833e579174123169b555694cb84291d997ed53850b7702dd6f599b77f6c7b9c86e97d50755ab7f57167b08898e8a514e5309b87936bf0cc5d47cc2d1525139dccd7b57540d2bcc518479b8b4c6aae3d49673e2d925ea11bad9bef2ae57d99ee32484e5f54c99d1178430774bb4a2169bd619f91a1d05a1e69432f3b6458711c3a2ab3f23996f09d"}], 0x120}}], 0x7, 0x4000044) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 01:57:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x1c07}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/215, 0x27}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) 01:57:00 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r4, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = dup2(r0, r5) ioctl$CAPI_CLR_FLAGS(r6, 0x80044325, &(0x7f0000000000)) [ 505.440356][ C1] sd 0:0:1:0: [sg0] tag#3447 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.451081][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB: Test Unit Ready [ 505.457804][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.467607][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.477434][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.488481][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.498327][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.508178][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.517983][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.527791][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.537635][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.547467][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.557294][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.567107][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.576906][ C1] sd 0:0:1:0: [sg0] tag#3447 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000540)={{0x80}, 'port0\x00', 0x23, 0x1c07}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/215, 0x27}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) [ 505.604073][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:57:00 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a300000000008000340000000000900020073797a30000000000400048004000480080003400000000814000480090001"], 0x1}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:57:00 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x656502) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000000e06010800000000000000000a000001050001000700000005000100070000000560010007000000050001000700000032a05d1acb9f7a215d13eab0f8b3a3bc0e5bf8f8e7eb945452beb2d7d1509fb4ecb6a8b2df18e3e884db0bfad908aad5f2605f319c531424f969d8131341fa658668311f6f8b64df253e4ebb2150e6b28db8332e4e7c0883ea66082f0fb750fa1baf3f6c594e8fea724152710d346f17f03b974d1cc72cb3c37fb1f06746b5ddd726103c004bd66a4e66de941e6895e0eedd0968c8c472ca4925daf4384dce5cff6ff6243267605bb0f625c07422d444bc7d1352b12d1d8d41c8a9715262d0a01600d80c1c"], 0x34}, 0x1, 0x0, 0x0, 0x20000890}, 0x40000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 01:57:01 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xed) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 01:57:01 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xed) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 01:57:01 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r2) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) r3 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:01 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:01 executing program 2: r0 = pidfd_open(0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/167, 0xa7}], 0x1, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/67, 0x43}], 0x4, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000040)={0x1, 0x10}, 0x18) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000001580)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r5) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) [ 506.337465][T12493] input: syz1 as /devices/virtual/input/input10 [ 506.377000][T12495] input: syz1 as /devices/virtual/input/input11 [ 506.380217][ C1] sd 0:0:1:0: [sg0] tag#3448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.394035][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB: Test Unit Ready [ 506.400707][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.410529][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.420381][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.430171][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.439960][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.449761][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.459548][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.469413][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.479263][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.489099][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.498961][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.508099][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 506.509799][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.509913][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[c0]: 00 00 00 00 00 00 00 00 [ 506.842418][ C1] sd 0:0:1:0: [sg0] tag#3449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.853027][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB: Test Unit Ready [ 506.859756][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.869632][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.879564][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.889479][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.899323][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.904324][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 506.909171][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.927394][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.937247][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.947101][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.956933][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.966812][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.976663][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9f3111b6, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xf}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3c]}]}, 0x48}}, 0x0) [ 506.986503][ C1] sd 0:0:1:0: [sg0] tag#3449 CDB[c0]: 00 00 00 00 00 00 00 00 [ 506.991757][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 507.030491][T12517] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 01:57:02 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9f3111b6, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xf}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3c]}]}, 0x48}}, 0x0) 01:57:02 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xed) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 01:57:02 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000090368eecd0876f5cc40c5f89002c0027fffcbe08b686fd455e58923efa8b3e44721f37a3c08e30940966733ba1d54684e4bc3b73d7c024ab31bfdd312a0cea3cf605ba59a6915992b594e6fd3e9601683ccde4db23b64bec2dc7c97ffaeebdc48a9381fddae821f3478d0054c26a4c75654b7750f9b3f33db29f53bee7c87ee67280d90cf243", @ANYRES32=r3, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) ftruncate(0xffffffffffffffff, 0x4) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r5 = getpid() read$rfkill(r4, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r5, r5, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:02 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140b, 0x200, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4880}, 0x4001) 01:57:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xed) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 01:57:02 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 508.229062][T12536] input: syz1 as /devices/virtual/input/input12 [ 508.234744][T12534] input: syz1 as /devices/virtual/input/input13 [ 508.268160][T12533] __nla_validate_parse: 6 callbacks suppressed [ 508.268190][T12533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 508.314593][ C1] sd 0:0:1:0: [sg0] tag#3450 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.325201][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB: Test Unit Ready [ 508.331806][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.341690][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.341815][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.341935][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:03 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d0e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765030000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070900"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16], 0x38}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x9b0000, 0xfffff800, 0x5, r2, 0x0, &(0x7f0000000080)={0x990a69, 0xfffffff8, [], @p_u16=&(0x7f0000000040)=0xfffd}}) preadv(r1, &(0x7f0000000300), 0x31, 0xaa) r7 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r7, r7, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 508.342056][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:03 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40c0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="d163c4925a160a9c8a8b4df54f2623aaacba033676291680e090ef01dc425fe9179a7fb972c7f1ffd6fd1ff86b5db791ddc84a76fe0d6cfa38d5929744cd88b09cb55789e312bbfa7065f7dd8b5cd0862c76bcdcbb7d", 0x56) [ 508.342186][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9f3111b6, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xf}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3c]}]}, 0x48}}, 0x0) [ 508.342309][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:03 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) write$apparmor_current(r3, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r2, 0x0, 0x0) [ 508.342442][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0x38) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f00000000c0)) [ 508.342575][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:03 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xed) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c44000000000000000001000010000001"], 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 508.342718][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.342827][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.342943][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.343057][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[c0]: 00 00 00 00 00 00 00 00 [ 508.405272][T12544] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 01:57:04 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000200)={{0x1, 0x9}, 'port0\x00', 0x10, 0x0, 0x3c, 0x7f, 0xffff, 0xfffffff8, 0x6b0, 0x0, 0x0, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x440000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101001, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x8840}, 0x4011) socket$inet6_dccp(0xa, 0x6, 0x0) [ 508.438945][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:57:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9f3111b6, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xf}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3c]}]}, 0x48}}, 0x0) 01:57:04 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) write$apparmor_current(r3, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r2, 0x0, 0x0) 01:57:04 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0x38) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f00000000c0)) [ 508.447976][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 508.449809][ C1] sd 0:0:1:0: [sg0] tag#3453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.449933][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB: Test Unit Ready [ 508.450158][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.450283][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.450422][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.450546][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.450669][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.450790][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.450912][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.451034][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.451162][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.451286][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.451407][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.451535][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.451650][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[c0]: 00 00 00 00 00 00 00 00 [ 508.471098][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 508.760271][ C0] sd 0:0:1:0: [sg0] tag#3392 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.760395][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB: Test Unit Ready [ 508.760521][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.760655][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.760776][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.760898][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761018][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761208][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761331][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761460][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761583][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761715][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761838][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.761959][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.762071][ C0] sd 0:0:1:0: [sg0] tag#3392 CDB[c0]: 00 00 00 00 00 00 00 00 [ 508.792248][T12564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 508.915130][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 508.939791][T12570] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 508.972085][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 508.991501][ C1] sd 0:0:1:0: [sg0] tag#3400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.991621][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB: Test Unit Ready [ 508.991748][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.991870][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.991993][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.992120][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.992311][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.992433][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.992554][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.992682][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.992804][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.992925][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.993046][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.993168][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.993288][ C1] sd 0:0:1:0: [sg0] tag#3400 CDB[c0]: 00 00 00 00 00 00 00 00 [ 509.084991][T12583] input: syz1 as /devices/virtual/input/input14 [ 509.215003][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 509.486069][ C1] sd 0:0:1:0: [sg0] tag#3401 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.520214][T12600] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 509.525863][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB: Test Unit Ready [ 509.526045][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/232) [ 509.600901][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 509.601455][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.993162][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.003711][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.013550][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.023355][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.033157][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.042985][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.052809][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.062619][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.072451][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.082260][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.092066][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 510.146828][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 510.169669][ C1] sd 0:0:1:0: [sg0] tag#3402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 510.180276][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB: Test Unit Ready [ 510.186992][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:05 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/45, 0xc6}) [ 510.196795][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.206602][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.216396][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.226202][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.235995][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x10, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}}, 0x0) [ 510.245821][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.255638][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.265882][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.275701][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.285647][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.295475][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.306159][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0x38) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f00000000c0)) 01:57:05 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "24caaa14f03dfa341848c56bcbb6a63d"}, 0x11, 0x3) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x10, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}}, 0x0) 01:57:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 01:57:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0x38) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc4c85512, &(0x7f00000000c0)) 01:57:05 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) write$apparmor_current(r3, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r2, 0x0, 0x0) 01:57:05 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000040)) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:05 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x7, 0x5, 0x3, 0x0, 0x0, 0xe83, 0x81, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x100000000}, 0x842, 0x7, 0x6, 0x3, 0xfffffffffffffffc, 0xfffff9ab, 0x8}, 0xffffffffffffffff, 0xf, r0, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r1) mmap$snddsp_control(&(0x7f0000fee000/0x11000)=nil, 0x1000, 0x1000004, 0x11, r1, 0x83000000) 01:57:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x10, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}}, 0x0) [ 510.986557][ C1] sd 0:0:1:0: [sg0] tag#3405 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 510.997271][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB: Test Unit Ready [ 511.003892][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.013788][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.023607][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.033439][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.043264][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.053057][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.062862][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.072661][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.082479][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.092273][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.100970][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 511.102068][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.120096][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.129890][ C1] sd 0:0:1:0: [sg0] tag#3405 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 01:57:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@val={0x5, 0x8100}, @void, @eth={@local, @dev, @val={@void}}}, 0x16) 01:57:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 511.322322][ C1] sd 0:0:1:0: [sg0] tag#3406 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 511.332970][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB: Test Unit Ready [ 511.339697][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.349492][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.359289][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.369124][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.378915][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.388706][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.398493][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.408286][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x10, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}}, 0x0) [ 511.418081][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.427886][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.437685][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.447481][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.457283][ C1] sd 0:0:1:0: [sg0] tag#3406 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:06 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:06 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) set_thread_area(&(0x7f0000000080)={0x9d5, 0x1000, 0x2000, 0x0, 0x0, 0x1}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000001380)=[{0x0, 0xffff, 0x800}, {}], 0x2) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x5, 0x1800}, {0x2, 0x1, 0x1800}, {0x0, 0xe2, 0x800}, {0x1, 0x100, 0x3800}, {0x1, 0x8}, {0x0, 0xf3f3, 0x1000}], 0x6, &(0x7f0000000040)={0x77359400}) 01:57:06 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 01:57:06 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) close(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x7, 0xfffffffffffffffc}) 01:57:07 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d0e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765030000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() r3 = getpid() ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f00000002c0)="1d3d66a26a03fbd3c71ed6a5824975f3e2c528f1f877ffeaf413a256005878a453a02d543807082aa5cf2b498445646561844e66d10a145aa2a2242b36f8224aaef062c523736de72b213883bccd21fa0425602ff52c2fc5e44db4af15c0629a257452f18ced1f6e2aac5e5cf9c8313c9327cb595a3a24992a75c6cc7f044e1c55b5c93d221a0683b31db926c06401dc26b4654c09d7fc5f06c9e6922d7320bd245af76bcb6445a678597541ea4df50b3a478fe45e56f10f41b9111e40bbddaf5833b1d525b720ffb72b21d1d16ab787a246b84c9238df89", 0xd8}) read$rfkill(r1, &(0x7f0000000480), 0x8) mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0x82) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x306, @dev={[], 0x30}}, 0x40, {0x2, 0x4e21, @loopback}, 'veth1\x00'}) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:07 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:07 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000080)=0x4) [ 512.548111][ C0] sd 0:0:1:0: [sg0] tag#3407 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 512.558775][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB: Test Unit Ready [ 512.565524][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.575408][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.585285][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.595189][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.605056][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.614946][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.624818][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.634686][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.644585][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.654446][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.664381][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.674242][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.684150][ C0] sd 0:0:1:0: [sg0] tag#3407 CDB[c0]: 00 00 00 00 00 00 00 00 [ 512.701606][ C1] sd 0:0:1:0: [sg0] tag#3408 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 512.712370][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB: Test Unit Ready [ 512.719084][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.728976][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.738788][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.748592][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.758402][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.768199][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.778012][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.787820][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.797636][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.807434][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.817235][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.827045][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.836881][ C1] sd 0:0:1:0: [sg0] tag#3408 CDB[c0]: 00 00 00 00 00 00 00 00 [ 512.857467][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:57:07 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) close(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x7, 0xfffffffffffffffc}) 01:57:08 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 01:57:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@val={0x5, 0x8100}, @void, @eth={@local, @dev, @val={@void}}}, 0x16) 01:57:08 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x2004c8d4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:08 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0xd0880) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c, 0x0) accept(r2, &(0x7f0000000300)=@ax25={{0x3, @bcast}, [@null, @rose, @bcast, @netrom, @remote, @null, @rose, @null]}, &(0x7f0000000380)=0x80) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000010c0)={0x1240, 0x30, 0x20, 0x70bd2c, 0x25dfdbff, {0x1}, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x158, 0x11, 0x0, 0x1, [@generic="c1a98eeffcb4597c5be46be4985dd53b793e13674e80c008a1a9b184895ce1e5c3e772b8d4d3c8c4943fa6306bc554212361cbb5b7465094c6c47c6a69921d03f6b8f0f44a75214f24e56ca125778086c5e76ea1249e326767a4645b91fe", @generic="9549e23e353b06267b863fcc580abcfa", @typed={0xb, 0x7c, 0x0, 0x0, @binary="7beb9baa0dc700"}, @generic="30857f86f6f84df89d3061c2252a054c70b89ec65ad2b3c2854632fd0faa5fecee70ad24ca8978b0fec450dd199e9756692d291ec1106cc7c20718e736c2ad049008b010757bf48518e6a245305b3024777a312731a1000fdb71a288f68abbff4e443724aaa52a0a113b4c98069edd2597738e51a916ce715de1765100d345a5ed158aedf9001901330dbc0405e800c5e513ae267f24a3e3d445a09afdf1f55423569b76fcd719576c52510ea90a2632fd28df6a050ca9f3414e108b891b406d96442bb7df8b2b37e88b2270702243516bc72959d69273e817c7"]}, @generic="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", @generic="d410a184afd34ea4f5cb0fac60090fbeedeb8efa4d6b3aff0fc6695a01216bb9c5a09119f444638a4d46380ac301635095b970d91eb43084c7cc493a1eba3eb8244c4449b902e4ad528ec6df4ad71717440a94d4a852be4c3f2fc48c184d14c4aa40091b2e6542c2e50916e5f64ab544ca81979010c7ab8f2d58526918e1501fbbfb036017fa32df8663599f175ed921f49c795365e4462d73f6337bef6f6310131edf2885ce3b6316a2b9fe26e40a81bcf54d72f515e0bfdcdaf501a1e618b2aaac"]}, 0x1240}, 0x1, 0x0, 0x0, 0xaeef8644f19b0642}, 0x40010) ptrace(0xffffffffffffffff, 0x0) 01:57:08 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000140)=0x69) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") rt_tgsigqueueinfo(0x0, r0, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x440400, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000300)={0x2, 0x5, 0x4}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setresuid(0x0, r3, r5) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev={0xfe, 0x80, [], 0x26}, @in=@broadcast, 0x4e21, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0x40, 0x3c, 0x0, r3}, {0x1, 0x100, 0x8, 0x4fa1, 0x8, 0xfffffffffffff000, 0x2}, {0x1, 0x7, 0x0, 0x1}, 0x6acb, 0x6e6bba, 0x2, 0x1, 0x2}, {{@in6=@local, 0x4d5, 0x33}, 0xa, @in=@multicast2, 0x34ff, 0x0, 0x48e4e1e6d2a8c497, 0x0, 0x7ff, 0x2, 0x4804}}, 0xe8) 01:57:08 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 01:57:09 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) close(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x7, 0xfffffffffffffffc}) 01:57:09 executing program 4: r0 = eventfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5f45f246800001cf"], 0x58) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="df015be2a1063cce", 0x8}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) 01:57:09 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:09 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 514.406205][T12714] sg_write: data in/out 538255012/289 bytes for SCSI command 0x27-- guessing data in; [ 514.406205][T12714] program syz-executor.1 not setting count and/or reply_len properly [ 514.512881][T12719] sg_write: data in/out 538255012/289 bytes for SCSI command 0x27-- guessing data in; [ 514.512881][T12719] program syz-executor.1 not setting count and/or reply_len properly 01:57:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x803, 0x401) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, r4, 0x1, 0x0, 0x0, {0xb}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 01:57:09 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:09 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r1) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000006c0)) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() read$rfkill(r2, &(0x7f0000000480), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) quotactl(0xd01, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 514.934381][T12726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@val={0x5, 0x8100}, @void, @eth={@local, @dev, @val={@void}}}, 0x16) 01:57:10 executing program 4: r0 = eventfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5f45f246800001cf"], 0x58) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="df015be2a1063cce", 0x8}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) 01:57:10 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) close(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x7, 0xfffffffffffffffc}) [ 515.242930][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 515.299445][ C0] sd 0:0:1:0: [sg0] tag#3421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 515.310185][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB: Test Unit Ready [ 515.316922][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.326800][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.336671][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.346570][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.356424][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.366293][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.376167][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.386037][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.395873][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.405965][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.415786][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.429079][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.438901][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[c0]: 00 00 00 00 00 00 00 00 [ 515.494676][ C0] sd 0:0:1:0: [sg0] tag#3422 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 515.505368][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB: Test Unit Ready [ 515.511983][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.521881][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.531696][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.541560][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.551466][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.561273][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.571092][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.580918][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.590746][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.600585][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.610426][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.620254][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.630067][ C0] sd 0:0:1:0: [sg0] tag#3422 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:10 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x3b, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e23, @local}}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x400, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x5, 0x3, 0x0, 0x7fff}, {0x2, 0x94, 0xff, 0x3}]}, 0x10) close(r0) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x40000, 0x0) r3 = getpid() ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x15, &(0x7f00000000c0)) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000280)={0x0, 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2, 0x1, 0x20) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468a5a264a646a333dcc042b687f254064c67e20a2526ebd8f707109a3e8483527f8c6a89b10e214c58e9d8756473d7b69202ff4b"], 0x48}}, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000200)={r0, r5, 0x2}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x9c0000, 0x6d, 0x0, r2, 0x0, &(0x7f0000000080)={0xa30904, 0xa3b, [], @p_u8=&(0x7f0000000040)=0x6}}) [ 515.759467][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:57:10 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:11 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) pidfd_getfd(r4, r0, 0x0) read$rfkill(r2, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:11 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 516.302885][ C0] sd 0:0:1:0: [sg0] tag#3423 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 516.318423][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB: Test Unit Ready [ 516.325146][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.334967][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.344789][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.354662][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.364497][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.374338][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.384148][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.393981][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.403743][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.413575][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.423403][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.433227][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.443041][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[c0]: 00 00 00 00 00 00 00 00 [ 516.464596][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:11 executing program 4: r0 = eventfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5f45f246800001cf"], 0x58) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="df015be2a1063cce", 0x8}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) 01:57:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="895b74e29fc8e535522bed7a32ea79b717bc42ac3a565d019abadd5a3d871dbb918bcc1518839ca88193da410d75165f0b7b52661c355c44fe7c9b54d75cec5971fba94f4d35647a799be05a9b5a2b1882bac98d3d7c2974d348d2e528d360381c5353709d09745856c834a2f893454d9f4f0000266300481bfb1ce8366858835bb1ebed3764d54bcffae0832fe47198a7a03842468c1c785c0650bfa609783ef07e6a3b250e08da881b947e51034f991107000000b078062fe3dbc3b1146b08eeb483ae3bf94ad7bfa1c5160e5794ae739ad0a506c6f1a9f18ec210116350ecf5022ebb578e67806307e829be25e5237a31dd4593bc3bf2", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x40}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 516.574191][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 516.591929][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 516.684176][ C0] sd 0:0:1:0: [sg0] tag#3424 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 516.694824][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB: Test Unit Ready [ 516.701525][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.711398][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.721264][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.731088][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.740960][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.750852][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.760716][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.770590][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.782366][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.792324][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.802199][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.812051][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.821888][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@val={0x5, 0x8100}, @void, @eth={@local, @dev, @val={@void}}}, 0x16) 01:57:11 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3) read(r0, &(0x7f0000000000)=""/29, 0x1d) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x81}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 01:57:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)={r1, 0x70, "cffbf13cf3c599c11762388d5a8290da62f705d0bb5e922b9a4755d9bc206c3d3a7e6edd06f1b2e8855a76ff52316c74b0cbb1bc3a3e149183a5338f49ee7a1fc8e5b058bd5c67294c41a680b85c4adc76855d36093892ee5520a83ece7fdb67018d4ee4cf34244528cfed081f879d3d"}, &(0x7f0000000080)=0x78) [ 516.961829][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:57:12 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:12 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:12 executing program 4: r0 = eventfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5f45f246800001cf"], 0x58) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="df015be2a1063cce", 0x8}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x13) [ 517.328629][ C0] sd 0:0:1:0: [sg0] tag#3425 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 517.339266][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB: Test Unit Ready [ 517.346104][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.355971][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.365833][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.375706][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.385565][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.395387][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.405296][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.411564][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 517.415104][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.415233][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.442954][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.452771][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.456043][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:57:12 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) [ 517.462596][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.480751][ C0] sd 0:0:1:0: [sg0] tag#3425 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)={r1, 0x70, "cffbf13cf3c599c11762388d5a8290da62f705d0bb5e922b9a4755d9bc206c3d3a7e6edd06f1b2e8855a76ff52316c74b0cbb1bc3a3e149183a5338f49ee7a1fc8e5b058bd5c67294c41a680b85c4adc76855d36093892ee5520a83ece7fdb67018d4ee4cf34244528cfed081f879d3d"}, &(0x7f0000000080)=0x78) 01:57:12 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x8}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000300)={0x8000, 0x8000, 0x1, 'queue0\x00', 0x6}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x10001, "4577781b96a329f3ebfb7fefa0910411d74266cc765862ccab57a50aee01cbfa", 0x20, 0x101, 0x95, 0x2, 0x1}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x6000080) close(0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000440)='/dev/sg#\x00') read$rfkill(r2, &(0x7f0000000480), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) rt_tgsigqueueinfo(r3, r4, 0x13, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)=0xff) ptrace(0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000800)={0x0, @reserved}) 01:57:12 executing program 2: getpid() r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001705000000000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) rt_tgsigqueueinfo(r1, 0x0, 0x22, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001300)={r5, 0x3, 0x6, @dev}, 0x10) close(r3) close(r2) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000002c0)={0x8, 0x10000, 0x6, 0x2, 0xc, "a747e486d8218d523e5eefe2597d897c2ed9c3"}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000100)={0x1000, {{0xa, 0x4e23, 0x0, @mcast1, 0x5}}}, 0x88) write$binfmt_script(r6, &(0x7f0000000000)={'#! ', './file0', [{0x20, '{\xf8'}, {0x20, '/dev/input/mice\x00'}, {0x20, 'syz1\x00'}, {0x20, 'syz1\x00'}]}, 0x2b) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r7) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f0000000040)='syz1\x00') [ 517.818215][ C1] sd 0:0:1:0: [sg0] tag#3427 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 517.828982][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB: Test Unit Ready [ 517.835707][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.845549][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.855425][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.865312][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.875157][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.885060][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.894914][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.904743][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.914577][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.924428][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.934276][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.944120][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.953957][ C1] sd 0:0:1:0: [sg0] tag#3427 CDB[c0]: 00 00 00 00 00 00 00 00 [ 517.978542][ C0] sd 0:0:1:0: [sg0] tag#3426 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 517.990587][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB: Test Unit Ready [ 517.997258][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.007109][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.016961][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.026799][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.036639][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.046478][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.056349][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.066218][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.076062][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.079957][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 518.085916][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.104143][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.113990][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)={r1, 0x70, "cffbf13cf3c599c11762388d5a8290da62f705d0bb5e922b9a4755d9bc206c3d3a7e6edd06f1b2e8855a76ff52316c74b0cbb1bc3a3e149183a5338f49ee7a1fc8e5b058bd5c67294c41a680b85c4adc76855d36093892ee5520a83ece7fdb67018d4ee4cf34244528cfed081f879d3d"}, &(0x7f0000000080)=0x78) [ 518.123853][ C0] sd 0:0:1:0: [sg0] tag#3426 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:13 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 518.288166][ C1] sd 0:0:1:0: [sg0] tag#3428 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 518.298883][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB: Test Unit Ready [ 518.305799][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.315778][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.325728][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.335672][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.345622][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.355573][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.365497][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.375449][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.385420][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.395399][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.405357][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.415340][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.425285][ C1] sd 0:0:1:0: [sg0] tag#3428 CDB[c0]: 00 00 00 00 00 00 00 00 [ 518.482165][T12825] device team_slave_0 entered promiscuous mode [ 518.488531][T12825] device team_slave_1 entered promiscuous mode [ 518.525495][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 518.538332][T12826] device team_slave_0 left promiscuous mode [ 518.544390][T12826] device team_slave_1 left promiscuous mode [ 518.682559][ C0] sd 0:0:1:0: [sg0] tag#3429 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 518.693198][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB: Test Unit Ready [ 518.700031][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.709884][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.719729][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.729585][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.738145][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 518.739441][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.757471][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.767320][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.777168][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.787010][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.796854][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.806698][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.816530][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.826379][ C0] sd 0:0:1:0: [sg0] tag#3429 CDB[c0]: 00 00 00 00 00 00 00 00 [ 518.883759][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 519.153949][ C0] sd 0:0:1:0: [sg0] tag#3430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 519.164585][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB: Test Unit Ready [ 519.171211][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.181079][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.190903][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.200746][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.210571][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.220385][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.229111][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. [ 519.230202][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.248290][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.258150][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.268005][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.277865][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.287717][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)={r1, 0x70, "cffbf13cf3c599c11762388d5a8290da62f705d0bb5e922b9a4755d9bc206c3d3a7e6edd06f1b2e8855a76ff52316c74b0cbb1bc3a3e149183a5338f49ee7a1fc8e5b058bd5c67294c41a680b85c4adc76855d36093892ee5520a83ece7fdb67018d4ee4cf34244528cfed081f879d3d"}, &(0x7f0000000080)=0x78) 01:57:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 01:57:14 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 519.297571][ C0] sd 0:0:1:0: [sg0] tag#3430 CDB[c0]: 00 00 00 00 00 00 00 00 [ 519.306935][ T4868] systemd-journald[4868]: /dev/kmsg buffer overrun, some messages lost. 01:57:14 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000640)={0xa20000, 0x7fff, 0x5, r4, 0x0, &(0x7f0000000500)={0xa30001, 0x5, [], @p_u16=&(0x7f00000004c0)=0xffff}}) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000840), &(0x7f0000000880)=0x4) 01:57:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) 01:57:14 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)) 01:57:14 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:14 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d0e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765030000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2429fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) ptrace(0xffffffffffffffff, 0x0) 01:57:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) 01:57:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 01:57:15 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)) 01:57:15 executing program 2: r0 = getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005f7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = getpid() ptrace$setregs(0xd, r4, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") rt_tgsigqueueinfo(0x0, r4, 0x26, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r5) [ 520.299116][ T4868] printk: systemd-journal: 8 output lines suppressed due to ratelimiting [ 520.367933][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 520.368057][ C0] sd 0:0:1:0: [sg0] tag#3434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 520.385475][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB: Test Unit Ready [ 520.392088][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.401899][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.411709][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.421525][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.431333][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.440690][ T1] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT [ 520.441162][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.460638][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.470465][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.480301][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.490123][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.499932][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) 01:57:15 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 520.509748][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 520.519543][ C0] sd 0:0:1:0: [sg0] tag#3434 CDB[c0]: 00 00 00 00 00 00 00 00 [ 520.606137][T12869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 520.689292][ T1] systemd[1]: systemd-journald.service: Unit entered failed state. [ 520.781361][ T1] systemd[1]: systemd-journald.service: Failed with result 'watchdog'. 01:57:15 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)) 01:57:15 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 520.901541][ T1] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 01:57:15 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 01:57:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) [ 521.087318][ T1] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 521.134259][ T1] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 521.170412][ T1] systemd[1]: Stopped Journal Service. 01:57:16 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 01:57:16 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)) [ 521.426403][ T1] systemd[1]: Starting Journal Service... 01:57:16 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 522.368996][T12897] systemd-journald[12897]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 01:57:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 01:57:18 executing program 1: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000004c0)=ANY=[@ANYBLOB="08338aa106009d00cd8761a500000000"]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) connect$netlink(r1, &(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x490041}, 0xc) r2 = getpid() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000440)={0x7, &(0x7f0000000400)=[{0x6, 0x1, 0x3, 0x4}, {0x8, 0xe, 0xc6, 0x2}, {0x0, 0x3, 0x8, 0x5}, {0xfffd, 0x14, 0xff, 0x4}, {0x3, 0x67, 0xa6, 0x4}, {0x7, 0x3f, 0x7f, 0x4}, {0x200, 0x40, 0xb9, 0x6}]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000040)) read$rfkill(r1, &(0x7f0000000480), 0x8) r4 = getpid() ptrace$setregs(0xd, r4, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") rt_tgsigqueueinfo(r2, r4, 0x18, &(0x7f0000000100)) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2b0e02, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) ptrace(0xffffffffffffffff, 0x0) 01:57:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:57:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 01:57:18 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffe6ffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000480)={0x5f74, 0x1, 0x1, 0x1, 0xffff, 0xffff, 0x9}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000100811d000000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000feffffff15000000090001206866736300000000080002"], 0x38}}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r8, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x4c, 0x0, 0x20, 0x70bd27, 0x25dfdc02, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x400c0c0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) [ 523.842515][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 523.897008][ C1] sd 0:0:1:0: [sg0] tag#3435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 523.907624][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB: Test Unit Ready [ 523.914387][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.924190][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.934030][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.943843][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.953639][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.963448][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.976885][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.986683][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.996481][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.006313][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.014918][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.016177][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.035258][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.045055][ C1] sd 0:0:1:0: [sg0] tag#3435 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:19 executing program 2: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) r1 = getpid() ptrace$setregs(0xd, r1, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x4) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) rt_tgsigqueueinfo(0x0, r0, 0x0, 0x0) 01:57:19 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:19 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x14f) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r8 = getpid() read$rfkill(r7, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r8, r8, 0x13, &(0x7f0000000100)) 01:57:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:57:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0) [ 525.079762][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:57:20 executing program 2: r0 = getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x80000001, 0x9, {r0}, {0xffffffffffffffff}, 0x2, 0x3}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x15, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000280)={0x0, 0x10}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x15, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000280)={0x0, 0x10}) rt_tgsigqueueinfo(r3, r2, 0x3d, 0x0) [ 525.170923][T12976] sg_write: data in/out 1717986882/293 bytes for SCSI command 0x0-- guessing data in; [ 525.170923][T12976] program syz-executor.1 not setting count and/or reply_len properly 01:57:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 525.341826][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 525.372069][T12976] sg_write: data in/out 1717986882/293 bytes for SCSI command 0x0-- guessing data in; [ 525.372069][T12976] program syz-executor.1 not setting count and/or reply_len properly 01:57:20 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0) 01:57:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 01:57:20 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x140) connect$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x1}}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\a\x00'/15, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r5, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) sync_file_range(r1, 0x3, 0x3, 0x0) 01:57:20 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() read$rfkill(r2, &(0x7f0000000480), 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000200)=0xe8) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x278, 0x12, 0x400, 0x70bd28, 0x25dfdbfb, {0x21, 0x3, 0x81, 0x81, {0x4e24, 0x4e24, [0xf2, 0x69, 0x2, 0x2], [0x10000, 0x9, 0x67, 0x8], r4, [0x7fffffff, 0x3]}, 0x10001, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "744add99bd473bbeaced0b8b0135614f1d2f7736bd12dab473c261e29165815a57acfc2e4d945d0bcfcc0efa6ac346ff1625656b4e47a1a55a325306a6e345048af32b7ad36c13379233dd8142c6d5fdf7ec8bf83a24abec4d3360c99718da069f6f7e58e2aadec94971b96119b47a66fa16c27b7e7dc2b258e324f5ed1dde13691237a6b450185bcedb128c8c6515a97807b8328a78369ecc0bd84b7ea34bda28b307615fa15db3d15436d665d50eed301b52"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "be391b4b3b6969c51fddaf7299e5f398f4ace48ace7f0acb36e5c3a389baedce98eec1d2e7534cfac5821f8586e6968daec8274959131d3cfaa6580264dce612974a4b57bac185992a0b5e1fab38d2c904b39de755138af7f7a6cfc1ac74214779fbeab36d45a11f7cdce18e845dd0be1ee37a140f3bba6ea6fbdb75df7524d93fab7de83895517fc05c4b40e04b023d8fd6ec1cce5e6f849c398de3a6bfe212056d877e043cd2bd3a34d41860a3ea1b8d69a0933f5b42"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "3fdbf4c4ae848d89c18536f65696329e1223dac4d0aba14b4059bd3ebb15c910f7e3c31e8b573680e5d66cd8aa814e57744757eaa3fb405d5976d9de5647970136241b3a605579d7c902ddf47955f6d3f1dc58c5644cc98a05d8898b5564284c994d161797c6b2a8ca52c0e82b4a85c2b3621b833fc03d74b321d31f217cd8a0b59abf1f0e2d3fdcba772d07169e9057a8e4ce6878d6d006a1c6edfa6199f68349ef91"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "76014f6af75f01e697e3958f"}]}, 0x278}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000940)=""/255, 0xff}, {&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000a40)=""/153, 0x99}], 0x5) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:57:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0) [ 526.067842][ C0] sd 0:0:1:0: [sg0] tag#3436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 526.078505][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB: Test Unit Ready [ 526.085246][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.095132][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.105015][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.114901][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.124772][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.134720][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.144572][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.154456][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:21 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 526.164329][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.174240][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.184122][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.193995][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.203816][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[c0]: 00 00 00 00 00 00 00 00 [ 526.248663][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:21 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x28, 0x5d, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'macvlan0\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f00000002c0)) 01:57:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0) [ 526.810618][ C1] sd 0:0:1:0: [sg0] tag#3437 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 526.821317][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB: Test Unit Ready [ 526.828054][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.837948][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.847784][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.857656][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.867531][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.877398][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.887353][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.897429][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:21 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 526.907279][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.917108][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.926988][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.936841][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.946674][ C1] sd 0:0:1:0: [sg0] tag#3437 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10}]}) [ 526.951728][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:22 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00005c0002005600010003000000000000000000000000000000000008000000000000000000000000000000020000005300000000000000008c0000000000080004"], 0x8c}}, 0x0) 01:57:22 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0x0, 0x0) 01:57:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10}]}) [ 527.588245][ C1] sd 0:0:1:0: [sg0] tag#3438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 527.598967][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB: Test Unit Ready [ 527.605672][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.615518][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.625387][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.635285][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.645110][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.654956][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.664797][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.674641][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.684499][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.694436][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.704268][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.714133][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.723970][ C1] sd 0:0:1:0: [sg0] tag#3438 CDB[c0]: 00 00 00 00 00 00 00 00 [ 527.751844][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:23 executing program 2: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) rt_tgsigqueueinfo(r0, 0x0, 0x31, 0x0) 01:57:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10}]}) 01:57:23 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 528.446543][ C0] sd 0:0:1:0: [sg0] tag#3439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 528.457292][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB: Test Unit Ready [ 528.464015][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.473834][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.483710][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.493530][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.503368][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.503640][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 528.513178][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.513301][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.541128][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.551496][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.561773][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.571599][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.581435][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:23 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@nop, @eol, @nop, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 01:57:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00005c0002005600010003000000000000000000000000000000000008000000000000000000000000000000020000005300000000000000008c0000000000080004"], 0x8c}}, 0x0) 01:57:23 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 528.591249][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 01:57:23 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0xab, 0xfff9, 0x2, 0x0, 0x9, 0x8, 0x20, 0x8, 0x2, 0x2, 0xb4, 0x0, 0x8}, {0x9, 0x0, 0x2, 0x2, 0x80, 0xcd, 0x4, 0x1, 0x4, 0x0, 0x7f, 0x7, 0x6}, {0x81, 0x1, 0x0, 0x40, 0x6, 0x20, 0x9, 0x7, 0x7e, 0x1, 0x6, 0xff, 0x5}], 0x7ff}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x2}) 01:57:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00005c0002005600010003000000000000000000000000000000000008000000000000000000000000000000020000005300000000000000008c0000000000080004"], 0x8c}}, 0x0) 01:57:23 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYRESDEC=r0], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x1c6010, r1, 0x8000000) write$FUSE_GETXATTR(r1, &(0x7f00000001c0)={0x18, 0x0, 0x3, {0x6}}, 0x18) r2 = getpid() r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x28002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@sack_info={0x0, 0x3, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r6, 0x40, 0x10, 0x1, 0x8000}, &(0x7f00000000c0)=0x18) read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10}]}) 01:57:24 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 529.177113][T13090] sg_write: data in/out 808464396/293 bytes for SCSI command 0x0-- guessing data in; [ 529.177113][T13090] program syz-executor.1 not setting count and/or reply_len properly 01:57:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) [ 529.302668][T13090] sg_write: data in/out 808464396/293 bytes for SCSI command 0x0-- guessing data in; [ 529.302668][T13090] program syz-executor.1 not setting count and/or reply_len properly 01:57:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 01:57:24 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00005c0002005600010003000000000000000000000000000000000008000000000000000000000000000000020000005300000000000000008c0000000000080004"], 0x8c}}, 0x0) [ 529.372623][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:24 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x8000026, 0x0) 01:57:24 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d0e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765030000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xb0, 0x1403, 0x2, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x48000) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() r4 = getpid() ptrace$setregs(0xd, r4, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xd, r4, 0x5, &(0x7f0000000340)="51c215fad8e01859bc770c964a487ef44f36334802edb717b22227c972a27c66fcb8ea691a884cb40763fc1dd91ce0e6f3c4d43bfe28d3d910895589a3b624ba97fb5618247677e08ced1df559d49a562f35bc1b18f818caca95f235a317be30c2b82c741bb462da30f8c578cb8b79a5769481837f39cf2fbbc2a46c47c8e5ccb47c5f48c19ed68c6e734563caea11029fcc93b43d6f526b8eaa79c619738d9330970faf3541e98508a6") read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:24 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 529.803316][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 01:57:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 01:57:24 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r6], 0x78) [ 529.990418][ C1] sd 0:0:1:0: [sg0] tag#3440 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.001035][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB: Test Unit Ready [ 530.007773][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.017612][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.027495][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.037338][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.047244][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.057124][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.066956][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.076800][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.086666][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.096527][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.106381][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.116224][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.126087][ C1] sd 0:0:1:0: [sg0] tag#3440 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:25 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 530.301974][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:25 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10100, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xcf) timerfd_create(0x2, 0x80000) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000140)=""/95) 01:57:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) [ 530.597866][ C1] sd 0:0:1:0: [sg0] tag#3441 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.608554][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB: Test Unit Ready [ 530.615396][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.625316][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.635216][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.645102][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.655111][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.664999][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.674905][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.684813][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.694719][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.704613][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.714509][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.724406][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.734290][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[c0]: 00 00 00 00 00 00 00 00 [ 530.742200][ C1] sd 0:0:1:0: [sg0] tag#3442 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.752947][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB: Test Unit Ready [ 530.759750][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.769643][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.779541][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.789448][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.799366][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.809307][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.819213][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.829131][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.839017][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.848917][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.858811][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.868782][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.878705][ C1] sd 0:0:1:0: [sg0] tag#3442 CDB[c0]: 00 00 00 00 00 00 00 00 [ 530.886692][ C1] sd 0:0:1:0: [sg0] tag#3443 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.897394][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB: Test Unit Ready [ 530.904161][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.914153][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.924145][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.924327][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.943786][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.953703][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.963614][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.973534][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.983463][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.993408][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.003312][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.013499][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.023422][ C1] sd 0:0:1:0: [sg0] tag#3443 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 01:57:26 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r6], 0x78) [ 531.061643][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:26 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d0e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765030000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e24, @multicast2}, 0x48, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='vlan0\x00', 0x4, 0xfff, 0x8001}) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x154, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x80000000, 0x0, 0x1a}}]}}]}, 0x154}}, 0x0) 01:57:26 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 531.399632][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 531.407264][ C0] sd 0:0:1:0: [sg0] tag#3444 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 531.418745][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB: Test Unit Ready [ 531.425469][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.435339][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.445249][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.455193][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.465055][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.474936][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.484816][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.494677][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.504538][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.514395][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.524261][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.534120][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.544003][ C0] sd 0:0:1:0: [sg0] tag#3444 CDB[c0]: 00 00 00 00 00 00 00 00 [ 531.548717][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:26 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="b6765fb7802c48d4a97282534c7f21370288a377fee3c3e3ca32acea22259c5758d8bdba347175742b4dae28869c66b81b5b9f04c1301ce0b9ede95f8a3aed2a560ea0900efa5f91b69c01af5ada3d4b237589e4071d9106f087230292632b164b86e2ac687592f255fd", 0x6a}) rt_sigsuspend(&(0x7f0000000140)={[0x1]}, 0x8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x7, 0x0) close(r1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000000c0)) [ 531.675748][ C0] sd 0:0:1:0: [sg0] tag#3445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 531.685086][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 531.686400][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB: Test Unit Ready [ 531.701400][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.711262][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.721203][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.731072][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.740928][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.750798][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.760669][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.770552][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.780448][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.790378][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.800268][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.810140][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:26 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r6], 0x78) 01:57:26 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r7, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) sendmsg$xdp(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2c, 0x4, r7}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="2f5879f32fb31d9a9b6d7ecc63da2bc994bbb5d20a693df1106304dbb0bc851c97b13538ca732dcd5dc612b5a4d94826fe94fb3f2ad5e50b89d10458d3eda876860ad499d36e3a41f9908dfcb48ae6d5e854a351d4238dce8bd4537514fa", 0x5e}, {&(0x7f00000002c0)="2de3ae81d0352430109d146aa1aae538c1b1491760111adf7ac764964439bca470beee9f5f56917f97e1c6180f74e3e9667ee2b1042770bcefa2734e4b9205d3e813f4d40fea7a0140e0de62aa675422badad568842a3e87b3eb60aaec7235a1b9cb96c6d0ce0abec7c9b2a72df44720bb451225ce45ed272e3f985e4c461108c994a859ceaed3122fcbce962080cb52ef5154ea9e2135cff6f6a4acf085a3756ff75a8fbbf84d01bdb6670bcd5cfa03e9e9bc33586f542246b693a6c8363a9cc4ec7304e987489804f48198465033ffeed8ef9088331eec22a9c86dbfe78e30ab1fe35d53217b26e0e55ee08b91b3c2e894b409d9c4ba6c0f", 0xf9}, {&(0x7f0000000180)="56dce2fc5db8a36daa6dc7739332d35b08b1c8d79c9f391bd023445d2f14b0cfd9da9d04b3080b96e191562d5431d6ecd75d9496fee77730eaf6100cc1ef4387a2230015b724059355307656c9a8e7f86271770b75666ec6520d705784db99ba976a4049f46d", 0x66}, {&(0x7f0000000200)="0bf75070cca75f3319a0881dcdd67349cc55477df74422d58b8939bc7a5d9b92ff7b8cb1358f", 0x26}], 0x4, 0x0, 0x0, 0x4044011}, 0x8080) [ 531.820011][ C0] sd 0:0:1:0: [sg0] tag#3445 CDB[c0]: 00 00 00 00 00 00 00 00 [ 531.825997][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000003f, 0x0) [ 532.009232][ C0] sd 0:0:1:0: [sg0] tag#3446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 532.019867][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB: Test Unit Ready [ 532.026601][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.036490][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.046370][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.056324][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.066214][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.076080][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.085976][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.095830][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x154, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x80000000, 0x0, 0x1a}}]}}]}, 0x154}}, 0x0) [ 532.105701][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.115567][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.125432][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.135291][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.145176][ C0] sd 0:0:1:0: [sg0] tag#3446 CDB[c0]: 00 00 00 00 00 00 00 00 [ 532.179596][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:57:27 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 532.290934][T13167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.302007][ C0] sd 0:0:1:0: [sg0] tag#3447 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 532.312874][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB: Test Unit Ready [ 532.319573][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.329440][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.339384][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.349346][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.359214][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.369071][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.378929][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.388806][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.398669][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.408540][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.418410][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.428282][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.438149][ C0] sd 0:0:1:0: [sg0] tag#3447 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:27 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r6], 0x78) 01:57:27 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x154, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x80000000, 0x0, 0x1a}}]}}]}, 0x154}}, 0x0) 01:57:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x200}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x80002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') dup(r7) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="479747f710000507000004010001000000000000eaa905cdab4f1bdb95ed6a19057d3d43802bcf81c71cd9d96cf3ecc59453a20987c9609587baa0309afeda94a54dbf8a04a8aeae8275e74125d814950b4a8f4bae42f176cf9c26d1af3957ef5a7765cfe330838b2bbe5fe538528f02b22787583cf5c6a74450948e280157617c957ce2721a8743498cdb60f03170c2056a9e660171ce7d99b5c3ef349b116ce22c90e7", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468", @ANYRES64=r6, @ANYBLOB="27554af89516d000b11f81b307965becd15b8a7a322ac1e47f91e50110df8b389b08585c6fb57338c22dde670d270c"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r5, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) r8 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000140)=0x35, 0x4) [ 532.829363][ C1] sd 0:0:1:0: [sg0] tag#3448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 532.840103][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB: Test Unit Ready [ 532.846839][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.856652][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.866487][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.876332][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.886138][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.895938][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.905749][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.915567][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:27 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x40505331, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0605345, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 532.925374][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.935189][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.945021][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.954834][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.964669][ C1] sd 0:0:1:0: [sg0] tag#3448 CDB[c0]: 00 00 00 00 00 00 00 00 [ 533.038217][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 533.405979][ C0] sd 0:0:1:0: [sg0] tag#3449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 533.416601][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB: Test Unit Ready [ 533.423365][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.433235][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.443116][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.452985][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.462859][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.472614][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.482507][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.492385][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x154, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x80000000, 0x0, 0x1a}}]}}]}, 0x154}}, 0x0) [ 533.502275][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.512187][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.522061][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.531971][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.541843][ C0] sd 0:0:1:0: [sg0] tag#3449 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x15, &(0x7f00000000c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000b96a65cc3efb2c0f90a42d4c3912d3baf9ca0ea51aac1500010068"], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x2, 'team0\x00', {0x5}, 0x6}) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000280)={0x0, 0x10}) rt_tgsigqueueinfo(r4, 0x0, 0x3, 0x0) [ 533.579862][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:28 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78dc20000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x5, 0x14}, 0x40) [ 533.959135][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:29 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200005) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 534.086331][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@dev}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 01:57:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 01:57:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x5, 0x14}, 0x40) [ 534.277308][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.310990][T13225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:29 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:29 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0xe1, 0x101, 0x1f, 0x3ff, 0xf8, 0x81}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@dev}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 01:57:29 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:57:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x5, 0x14}, 0x40) 01:57:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') [ 534.787511][ C0] sd 0:0:1:0: [sg0] tag#3450 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 534.798262][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB: Test Unit Ready [ 534.804995][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.814951][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.824824][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.834720][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.844586][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.854445][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.864314][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.874199][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.884063][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.887231][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 534.893878][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.893998][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.921814][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.931643][ C0] sd 0:0:1:0: [sg0] tag#3450 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:29 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:30 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = eventfd2(0x20, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) fcntl$lock(r2, 0x12, &(0x7f0000000080)={0x2, 0x1, 0x4, 0x0, r7}) r8 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r8, r8, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x5, 0x14}, 0x40) 01:57:30 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000000)=""/216) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x440041, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r5) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000004c0)={0x5, 0x7, {0xffffffffffffffff}, {0xee00}, 0x0, 0x2084}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r7, 0x400454ce, r8) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000140)={{}, {0x1, 0x3}, [{0x2, 0x0, 0xee01}], {0x4, 0x4}, [{}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x0, r8}], {0x10, 0x1}, {0x20, 0x4}}, 0x44, 0x0) fchown(0xffffffffffffffff, 0x0, r8) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000500)={0x208, 0x0, 0x1, [{{0x4, 0x3, 0x8, 0x0, 0x0, 0x9, {0x4, 0x4, 0xea4f, 0xffffffffffffffea, 0x2, 0x10001, 0x7, 0x4, 0x1, 0x401, 0x7, 0x0, 0x0, 0x9, 0x2}}, {0x0, 0xfffffffffffffa19, 0xa, 0x1, '/dev/null\x00'}}, {{0x6, 0x2, 0x40, 0x3, 0xb2, 0x7107, {0x4, 0x10000, 0x200, 0x3, 0x81, 0xf3b, 0x6, 0x400, 0x15, 0x6dbc, 0x9, 0x0, r4, 0x9, 0x8000}}, {0x5, 0xc1d, 0xa, 0x100, '/dev/null\x00'}}, {{0x3, 0x0, 0x2, 0x1000, 0x51e, 0x5, {0x5, 0x7, 0x8, 0x7, 0x1, 0x7f80000000000000, 0x6, 0x4e93, 0x7f, 0x3, 0x20, r6, r8, 0x8000000, 0x4}}, {0x5, 0x4, 0x10, 0x3, '/dev/input/mice\x00'}}]}, 0x208) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x40, 0x3, 0x3}}, 0x14) 01:57:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 01:57:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@dev}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) [ 535.434997][ C1] sd 0:0:1:0: [sg0] tag#3451 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 535.445674][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB: Test Unit Ready [ 535.452283][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.462180][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.472056][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:30 executing program 5: r0 = epoll_create1(0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000303f}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 535.481991][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.491850][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.501700][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.511551][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.521407][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.531244][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.541064][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.550864][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.560658][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.570460][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[c0]: 00 00 00 00 00 00 00 00 [ 535.596756][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:57:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@dev}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) [ 535.717236][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 535.729005][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 535.734420][ C1] sd 0:0:1:0: [sg0] tag#3452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 535.748125][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB: Test Unit Ready [ 535.754795][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.764646][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.774448][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.784281][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.794076][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.803873][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.813676][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.819182][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 535.823470][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.841630][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.851445][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.861249][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.871038][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.880822][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[c0]: 00 00 00 00 00 00 00 00 [ 535.892913][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:30 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 01:57:31 executing program 5: r0 = epoll_create1(0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000303f}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 01:57:31 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x62, 0x9, 0x400, 0x7, 0x39, 0x8000, &(0x7f00000000c0)="fa67df92852f200116cb7d085bf9b7afa22c3fb05d91439f3578d0c7e10713b8b2835332846ca410a7300ab9a369967422c35b96730b8a7b4f"}) close(r3) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000040)={0x0, &(0x7f00000002c0)="4945920634178d494c0b45a05ef3ff7c1f3df1b42a9c3c93b5151f392a8e1537aa473ec52ba54ed715ef018abe9868fd174823554ce328104fc34578ecaf3c857ef75f8b800516886db64803c0ca9a5735c906fb763665458ecf72afcc6ce1a936459fd85a16a83cb8dd3abed4d5daf81b766531ec8be472746b50d48af6e97b7efd28c9877f9faa4eab4fa8cfb424c8d973eee4b22e45f1269df2440134c5cef48c69c50898998fdebc68e0234690cf64c3cc13dbadd643cdb0681214c825fac6ee", 0xc2}) read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) [ 536.198387][ C0] sd 0:0:1:0: [sg0] tag#3453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 536.209017][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB: Test Unit Ready [ 536.215748][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.225646][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.235511][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.245429][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.255265][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.265122][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.274943][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.284823][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:31 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\tr0s\xac\x84cusgrVex:De', 0x0) [ 536.294640][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.304506][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.314327][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.324206][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.334059][ C0] sd 0:0:1:0: [sg0] tag#3453 CDB[c0]: 00 00 00 00 00 00 00 00 [ 536.448917][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x0, 0x100, 0x210, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "93e9209e1115e0790312a7e27a65d8b41acde3539fa6fa2400c4d8b06bd4"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @multicast2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) 01:57:31 executing program 5: r0 = epoll_create1(0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000303f}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 536.912430][ C0] sd 0:0:1:0: [sg0] tag#3454 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 536.923182][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB: Test Unit Ready [ 536.929811][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.939707][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.949561][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.959444][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.969302][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.979176][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.989009][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.998858][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.008707][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.018537][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.028394][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.038309][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.048169][ C0] sd 0:0:1:0: [sg0] tag#3454 CDB[c0]: 00 00 00 00 00 00 00 00 [ 537.061232][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x0, 0x100, 0x210, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "93e9209e1115e0790312a7e27a65d8b41acde3539fa6fa2400c4d8b06bd4"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @multicast2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) 01:57:32 executing program 5: r0 = epoll_create1(0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000303f}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 01:57:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c908200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3428bd7f9c8ccdb406ecffff21bcd2", 0xf}, {&(0x7f0000000080)='N', 0x1}, {&(0x7f0000000200)="9a", 0x1}], 0x3}, 0x0) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) 01:57:32 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:32 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x400800, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f00000010c0)) r3 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) 01:57:32 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000280)=[{0x6, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000a40)=ANY=[@ANYRESHEX], 0x0, 0x8005}], 0x1, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000014}, 0x4044800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=r5, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004", @ANYRESDEC, @ANYRESDEC=r0], 0x38}}, 0xc0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@loopback, @in=@local, 0x4e22, 0x0, 0x4e23, 0x2, 0x2, 0xa0, 0x40, 0x84, r5, 0xffffffffffffffff}, {0x7f, 0xff, 0x400, 0x10001, 0x7, 0xfff, 0x5, 0x7}, {0x8001, 0x2, 0x4, 0x1}, 0xffffffff, 0x6e6bba, 0x2, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@ipv4={[], [], @multicast1}, 0x3501, 0x4, 0x3, 0x4, 0x4fc, 0x0, 0x96}}, 0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x8a3, r8}, &(0x7f0000000040)=0x10) [ 537.551271][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 537.700097][ C1] sd 0:0:1:0: [sg0] tag#3455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 537.710858][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB: Test Unit Ready [ 537.717571][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.727411][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.737207][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.747059][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.758862][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.768670][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.778479][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.784982][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 537.788269][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.806372][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.816179][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.826017][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.835814][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.845614][ C1] sd 0:0:1:0: [sg0] tag#3455 CDB[c0]: 00 00 00 00 00 00 00 00 [ 537.865468][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x0, 0x100, 0x210, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "93e9209e1115e0790312a7e27a65d8b41acde3539fa6fa2400c4d8b06bd4"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @multicast2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) 01:57:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x58}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x10001}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x8}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x108}}, 0x4000000) 01:57:33 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) prctl$PR_GET_TIMERSLACK(0x1e) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x101, 0x0, 0x9dd, 0x7ff}) ptrace(0xffffffffffffffff, 0x0) [ 538.240392][ C0] sd 0:0:1:0: [sg0] tag#3393 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 538.251177][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB: Test Unit Ready [ 538.257897][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.267817][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.277714][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.287578][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.297449][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.307319][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.317191][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.327077][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.336943][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.346822][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.356691][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.366562][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.376441][ C0] sd 0:0:1:0: [sg0] tag#3393 CDB[c0]: 00 00 00 00 00 00 00 00 [ 538.423823][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:33 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:57:33 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000006c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0205649, &(0x7f0000000700)) 01:57:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x0, 0x100, 0x210, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "93e9209e1115e0790312a7e27a65d8b41acde3539fa6fa2400c4d8b06bd4"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @multicast2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) [ 538.612144][ C1] sd 0:0:1:0: [sg0] tag#3392 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 538.622745][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB: Test Unit Ready [ 538.629362][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.639343][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.649167][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.658987][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.668817][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.678638][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.688448][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.698315][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.708150][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.717975][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.727815][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.737637][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.747442][ C1] sd 0:0:1:0: [sg0] tag#3392 CDB[c0]: 00 00 00 00 00 00 00 00 [ 538.751289][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 538.755284][ C1] sd 0:0:1:0: [sg0] tag#3394 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 538.774287][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB: Test Unit Ready [ 538.780909][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.790764][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.800592][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.810437][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.820251][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.830075][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.841441][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.851253][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.855823][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. [ 538.861055][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.879207][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.889006][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.898810][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:57:33 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:33 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400080, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r2 = getpid() read$rfkill(r1, &(0x7f0000000480), 0x8) rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000001380)=[{0x0, 0xffff, 0x800}, {}], 0x2) semctl$SEM_INFO(r3, 0x0, 0x13, &(0x7f0000000180)=""/153) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r5) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000300)={0x0, 0x17580000, 0x10000, 0x7ff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f00000000c0)={r6}) ptrace(0xffffffffffffffff, 0x0) 01:57:33 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x9}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x10000}) [ 538.908598][ C1] sd 0:0:1:0: [sg0] tag#3394 CDB[c0]: 00 00 00 00 00 00 00 00 [ 538.956303][T12897] systemd-journald[12897]: /dev/kmsg buffer overrun, some messages lost. 01:57:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\a\x00'}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) 01:57:34 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x114, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee31}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f4d14c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22232ca6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16b9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28daa2c2}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a13b1ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2966}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c3411a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5adae894}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33d4fcba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b36}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2adb3305}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe761}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f6b1b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43c8d4a3}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 01:57:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\a\x00'}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) 01:57:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\a\x00'}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 540.133893][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x58}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x10001}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x8}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x108}}, 0x4000000) 01:57:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\a\x00'}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) 01:57:35 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)) 01:57:35 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000072000162010000000000000007"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 01:57:35 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x9, 0x1, 0x1}, &(0x7f00000000c0)=[{}]) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 01:57:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9b51000014", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='*'], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 01:57:35 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 540.869203][T13422] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.0'. 01:57:35 executing program 2: r0 = getpid() ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) r2 = getpid() ptrace$setregs(0xd, r2, 0x1, &(0x7f0000000000)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7097105d0901b9b22c2b391fe7d5f546a044b4b9828458339d1a79b3501e05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d9fdb655cc7ff83f066c099b52641be475d4089280afd725e6a39eec116d93ed6858fb46905e386ce87fc79257bc544bb8f4b860b0ef9b3267ff1df2a369cc29b709d3b88d24dbbee1b0853fdd73207ac909a7f720a27feeff540fe") r3 = getpid() ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") rt_tgsigqueueinfo(r3, r2, 0x20, 0x0) [ 540.919557][T13434] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.0'. 01:57:36 executing program 4: unshare(0x6000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x620140, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 01:57:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0xfffffffffffffffe) r2 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0xb56c58075ff72a5b) sendto$unix(r2, &(0x7f0000000180)="210000d9", 0xff46, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 01:57:36 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000072000162010000000000000007"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 01:57:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x58}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x10001}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x8}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x108}}, 0x4000000) 01:57:36 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:36 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)="c680b180f32749c1a82d83bbc9c33cbfb556e2c31f875c00b84e1b55a70657d0179cba7404d013c1a06d12f1cd1bc3efcf2c24670b690395e575f3c0c24df35af606000000b9faad5420ef46e79e8e61fb450966919dec55750972e50a3944577f82016c28fab899c497b886aec694920459fede79f5fcf25631468a535dc18614", 0x81, r0) keyctl$clear(0x7, r0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)=']\x00', 0xfffffffffffffffb) [ 541.438298][T13444] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 541.477187][T13446] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.0'. 01:57:36 executing program 4: unshare(0x6000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x620140, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 01:57:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0xfffffffffffffffe) r2 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0xb56c58075ff72a5b) sendto$unix(r2, &(0x7f0000000180)="210000d9", 0xff46, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 01:57:36 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000072000162010000000000000007"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 01:57:36 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:36 executing program 4: unshare(0x6000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x620140, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 01:57:37 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r0, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x41, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x960000, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r6) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0xfffa, r5, &(0x7f0000000780)="b7265715aeed5f3510138089ce9c3b52b03b197330bf3351e9752c7549ab569a2f842b8c313b440042d64b8527b62c6d35551ce9c4b91e6b3c695dcbb8eda67aee9279a6ba3a491a089b6a1f04682c1b68f9b129ac8ec75166c7297ddc2ba139203f9b92d68fe36ff3ee259a5d264837a4be5ca795b1115a2d0ca4f44ec629aa21d8c700dcaa48e9bc83d837b585e6590d18758fce05d39a73d5d8eedb4dcc4fee067b6af150bcf1d9ef", 0xaa, 0x7, 0x0, 0x2, r6}]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x24, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x43c, 0x3f4, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x2, 0x3c, [0x40, 0x620, 0x5, 0x9, 0x20, 0x1, 0x0, 0x400, 0x0, 0x30dd, 0x9, 0x8001, 0x10001, 0x1ff, 0x401, 0x5, 0x2, 0x8, 0x1f, 0x7, 0x100, 0x2, 0x100, 0xf03, 0xa312, 0x5, 0x800, 0x8, 0x1, 0xff, 0x4, 0x81, 0x7, 0x3f, 0x100, 0x5, 0x2, 0x2, 0x8, 0x2, 0x1000, 0xfffffffd, 0x8, 0xfffffff9, 0x2b83dd05, 0x6, 0x0, 0x7, 0x3, 0xfffffff7, 0x80000000, 0x8, 0x1, 0x1, 0x2, 0x0, 0xffffff57, 0x2, 0x5, 0x9, 0x80000001, 0x80000000, 0x5, 0xffffffff], [0xffffffff, 0x5, 0x1, 0x4, 0x7, 0xfffff001, 0x401, 0x8, 0x8, 0x4, 0x8b, 0x2d, 0x5, 0x3, 0x8, 0xcd, 0x3ff, 0x3f, 0x2, 0x80000001, 0x6, 0xf34, 0x7, 0x10000, 0x8, 0x6582, 0xdadd, 0x8, 0xff, 0x5, 0x8, 0x8, 0xe1, 0x8, 0x8, 0x6, 0x7, 0xe63c, 0x7fff, 0x1, 0x1, 0x6417, 0xfff, 0x3f, 0x40, 0x2, 0x3143, 0x4, 0x40, 0xfed, 0x40, 0x2, 0xffffffff, 0x0, 0x4, 0x4, 0x40000, 0xfffff000, 0x4, 0xf4c4, 0x3, 0x1f, 0x2, 0x2], [0x9, 0x8000, 0x4, 0xa675, 0x1f, 0x0, 0x3, 0x1, 0xacd6, 0x400, 0x7ff, 0x7fff, 0xa1, 0x3, 0x6, 0x284, 0x0, 0x7fffffff, 0x0, 0x401, 0xff, 0x8, 0x80, 0x9, 0x6, 0x9, 0xffffffff, 0x8, 0x1, 0x10001, 0x0, 0x0, 0x7fff, 0x1, 0xc0f, 0x1, 0x7, 0x1, 0x80, 0x5cb, 0x0, 0x2, 0x80, 0x7, 0xc8bd, 0x167d, 0x8001, 0xffff8000, 0x81, 0xff77, 0x4, 0x2, 0x1f, 0x0, 0x3, 0x5, 0xfffffffb, 0x3, 0xffff1fe0, 0x20, 0x20400000, 0x8, 0x20, 0x3], [0x7, 0x81, 0xcc6c, 0x739, 0xfffffe65, 0x3, 0x10001, 0xe53, 0x1, 0x6e, 0x9, 0x7, 0x4bb5, 0x6, 0xfffffffb, 0x9, 0x7, 0x1000, 0x5, 0x1ff, 0x7, 0x81, 0x3f, 0x208, 0x6, 0xbf63, 0x7, 0xd2, 0x101, 0x0, 0x7, 0x3, 0x147, 0x8000, 0x10001, 0xffff7fff, 0x9, 0x200, 0x4, 0x4c9, 0xffff0000, 0x29d1, 0x785, 0x94000000, 0x3f, 0x4, 0x7fff, 0x1, 0x2, 0x8, 0x8, 0x1f, 0x71, 0x3f, 0xfffffffc, 0x8, 0x6, 0x59b1, 0x3835a98d, 0x8, 0xffffff5b, 0x101, 0x7, 0x2], 0x1c, ['{\x00', '@)*,{\'-:^\x00', '\'^\x00', '\x00', ',%^{\x00', '@@^%)\x00', '\x00']}, ["", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x8046}, 0x1) [ 542.274454][T13461] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.0'. 01:57:37 executing program 4: unshare(0x6000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x620140, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 01:57:37 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0xfffffffffffffffe) r2 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0xb56c58075ff72a5b) sendto$unix(r2, &(0x7f0000000180)="210000d9", 0xff46, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 01:57:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x58}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x10001}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x8}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x108}}, 0x4000000) 01:57:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000072000162010000000000000007"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 01:57:37 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x70, 0xda, 0x9, 0x9, 0x80, 0x0, 0x20, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x40001, 0xce, 0x9, 0x5, 0x3, 0x3, 0x4}, 0xffffffffffffffff, 0x10, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000600)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/144, 0x90}], 0x3, &(0x7f0000000980)=""/85, 0x55}, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r6, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={'syztnl0\x00', r6, 0x4, 0x6, 0x81, 0xfffffd03, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x7, 0x1, 0x1, 0x5}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xbc, 0x0, 0xa229cc2aab04be03, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4080) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r8) write$P9_RSYMLINK(r8, &(0x7f0000000000)={0x14, 0x11, 0x1, {0xa, 0x3, 0x2}}, 0x14) 01:57:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') dup3(r1, r0, 0x0) [ 542.723449][T13484] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.0'. 01:57:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="683dcac57b2b7295e00e18b23ee3b4757100a516d94a1be84b57d4f9ba8eb9bca94a74bde005baa3b9467b57d7363b8cf1104788c710e9474a9392d3fd47fca4fd", 0x41) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 01:57:38 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:38 executing program 4: r0 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 01:57:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0xfffffffffffffffe) r2 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0xb56c58075ff72a5b) sendto$unix(r2, &(0x7f0000000180)="210000d9", 0xff46, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 01:57:38 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0xc, 0x0) 01:57:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="683dcac57b2b7295e00e18b23ee3b4757100a516d94a1be84b57d4f9ba8eb9bca94a74bde005baa3b9467b57d7363b8cf1104788c710e9474a9392d3fd47fca4fd", 0x41) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 01:57:38 executing program 4: r0 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 01:57:38 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:38 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x80000001}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40011) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffff6794374700667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c0027ff00"/20, @ANYRES32=r8, @ANYBLOB="0000e0ff000000000f00000008000100753332000c0002000800040004"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000000c0)={@remote, r8}, 0x14) 01:57:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="683dcac57b2b7295e00e18b23ee3b4757100a516d94a1be84b57d4f9ba8eb9bca94a74bde005baa3b9467b57d7363b8cf1104788c710e9474a9392d3fd47fca4fd", 0x41) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 01:57:39 executing program 4: r0 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) [ 544.095714][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:39 executing program 5: get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x3) [ 544.186582][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 544.241462][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:39 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="683dcac57b2b7295e00e18b23ee3b4757100a516d94a1be84b57d4f9ba8eb9bca94a74bde005baa3b9467b57d7363b8cf1104788c710e9474a9392d3fd47fca4fd", 0x41) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) [ 544.408041][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 544.420301][T13537] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:39 executing program 1: r0 = socket(0x400000010, 0x802, 0x0) write(r0, &(0x7f0000000800)="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", 0xfc) 01:57:39 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{}, {0x80000006}]}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 544.528505][T13531] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:39 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r1) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x4000, 0xfffff000}) 01:57:39 executing program 4: r0 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 01:57:39 executing program 1: r0 = socket(0x400000010, 0x802, 0x0) write(r0, &(0x7f0000000800)="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", 0xfc) 01:57:39 executing program 0: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x1}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) 01:57:39 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:40 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{}, {0x80000006}]}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 01:57:40 executing program 1: r0 = socket(0x400000010, 0x802, 0x0) write(r0, &(0x7f0000000800)="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", 0xfc) 01:57:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) 01:57:40 executing program 2: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"4110cf2d64f02dc35b381e30059df5b01b8ea9dbbcd38248163316c979c5f63f53c343c6bb1e410dcf9674ae077e1bbe62a9d8a9177836b3284d298d4a51eaf6abc99529541866652d81ff0090ae04ab06f3ce7cb94c8168d4173c52b1898938027c353e1d2932a956b1f0920fabc67e8d48653ddbfe48470166d552e8e58cfa03d5251925b576b5e78cf00ae5a8d4dc3de75f5b180894604cc9bfaacf1e3ea77fa93237cae33eee2f6ad6639fba47d4f1bc33e3de7ded1df00599d1e75cf0a7d4fb9396985c3c7d2b563ac294bb8ef826f95cdb092381567e9b479e434d856b10adae6814e53d1657b12f3e70ccb8f3b06ea56b7d32cbba0ac998e97698e52847bc8889e7892e7f34888f82a2e19eb2117d9b27c54767799dcfcb60e2f048228d7cbc0b91940925fa0351fe0842078be0d570587b86ef99ad1c59ccb7c3a73856e8df971db69d7f5880a740d798072c419e733f9d4dbae8fa39bbbf7b2a6c5dfbaf00a2b87ef6c191e2355a1bfe5433d8ab6b529c60cd1cafb046c4d18e4205240ee14c7fbcd3bee450e5d0f45fcf54d99b28cc3867b4bd980f0acfeee979756145191c6f56212251bf7d767d5fd06068e7ad24482dce6827ede07fa00be2719c5d9d1a20e3d780ca02ed8c51c1277de86dc7a79f78329924cd383ccebcf795523263e2564de67f3357e649316c14aa1c5dfd253f7df186fb8dfd5a39dc625a4896599cba4413db9554aec59e1d35f0228e05ff0040125bfad5e07204d0abdbd32d7aa7fe71ac94b0277fc4eb01e2d1ecfd01acc9a7471a29e4a44de5b576314e1e48b88586b179fbb5f4614c35d5e3b3a1815013ae9f9e908b1ba84b0f96493d11cbd830cb1015211869c15c70da87eba58bbd753bc60cf4a7abae1f123ea8f61b722771dd6d9db3245e4e42ec4da4affdb7f9c4b66ffb0c0ede3022de557b1d6fc47ce49ecde13e970f9b7df2947f6830c1d369f1bef53a8d122eff0697d2dd9e26ca4d7bd7241a1780f02b678a70b9029a7818692bd9e7a054d571debc2b530e86ec5c162d192515d71ee4a398357cb28e7ceaebad3249f202b5686f1493534e94c8087e6b20f1d1f09c1581b153177c79381aa86103e02f2595228ec40aecb6249e5c3cbe3eb13498752e93c9d1d5300983ca80c82b30f7c6c311716df37e9a66169107bd9ecc592214199da9279ff389c6eb5140bc42939e6bf9325e1d9f3c2a69d9422ed4261f0dbe8ae9c2a7c7d839911f9745ade5ec784cb2a4936804a8b11c517e61c01046a5b4f0279d1f7d6774eeae61761bb90cf01611ea25a38d8f94d4b06136c87cb44eb5c82a0b971991ae62c99e87c71bfa568ac5e94f902f69d27a515fb24fd870e82d2d54396f7e49f1c22b1b9787d560dc517e6d6caf7e9b4e1935eb270f29cc704935413295c67bdbbf5411d4c52930e5c5075e18fa7a96cffed20c0efef2c6697f1438d07d7a0172dcf6d6e6930dd15190a8f8f24db1b4969a1bf1282b06cdbb77564a0cad77b45dc4168ed5e30be971673125291c04381260d0b000fb821641f830251b89507bc0a593838eb82bc9b45cf17cf8f1bdf98f430afe2cd611f0593d882f2381aba53c2ba9ec9d28a90792128f35c595d5417f3803cc2cf6d564b1644e95757f6605547ac499998aa5b5938b6a6759eb3dc620f9745fda71d0ad6d3d4ce7cdd9440edfa8834f00c653975c9ac45f7348a9e569df2edab4a9e085bbb3fba0713b36ba2647b5176ca7f7831e07406cfc308bf170639f99b84bab34ae1f3ecb121cac369413cfa5e7341d07fd93288abc50048bf8c05d21f3135d38cb63b89cdd812a3c6a38ef9001498c04f56986ac0bad1ba1ccc057cdfb01aa8dc17cf83368ac4f4b2dae0346cb0fcb5ba32d55127560bcfea0bada44a7fbf8e208560aca5aa6ce93b4fc4b7ee34aee84cca96744b86fd8e444c824fea37f8a1c66c9dea2d00f6d3732aaec6b020c0537867ccc4d391037d0439868682a4e5d427cc0a658079bc5dfc54ab8cbf85cee9b28c2d6bb88f41acc1be682813765e4c8c9ad29138ff9dec68d0b4ab41c1c056f186770aa046d166f77b9eab22426e56155e78487073a21e27789767488999659d16e578f0876e3e7d778c616d87ded9d380f2fdd8b7a9800df1ec416b471579c4abf09646e9fab400b4575056d63e86cbdc6bd3322d6e1b3eec25fe5e80e0db4c3914c072d0debfcb6bb98a2e0d9b9743223bdc01b89f70d64f7dcef55d06187df40ea64e2e7479e65629a2b56f4dc3ca4d86e88a83cdc97bdf4cbaf0ad12bdea810b423c4d53d9d918709597dd6105704e0e238c133714bc13a9f0b91b051dbad0ec1d1f081c404d14d9b159709dac1aedcc6d8fab1c495945a263e4b3538cea9aee6cf740cd3d73f95fbb9c67a722f9358e7f245d870db72ae69103a632e9824bb2921044df36e0a970a778b2d0d5eaca197932bb013529a21a588dacd2e7774e41c4a1cdd7ca11a7a55a26a5dfe47bd1f03cd0f6f7b37629b115fa17e328128a27688c9c941b8f9547e9e87841fc5da96a6d73db3ae8ae98f9575ccc1fa45078125317cccbb4b921c9c138ec993c967bf31be4363c811446cd30549d85dd77b728fbaf1a77b67700490943a000410a61d0bfc808e1edcb23507816074fcd9d0cc632bd8acc8d4571b15bec26709f74161ad92a5ef11a7d681180aa209db06c08b8cede6ddd53d0b19089a0c3c3e1358a5412a7d40ccf1b3d594662563647eef04ef3b39b7af644f6f9ece3944184124b3784175439f88d48b14de03b5ff3fd9fb9ca0611dbdb4a496ad0d90c57f9461035ef93072842519f7030d84906493da78eed1a3638057eb0389cfd63810aa381a3d24e5e2bc41ebd3454eff58f9260993db8bc12a3c971ee41d49c48546fc2f51b50582a890cec444099bbb8cf3382c4a41ab4553222543d341b99cb122502c8c092c6c9daf32d4099124ac25226537be4f3a34264ba08a0a83ab82377596e7ab501b3589a85a86351a4506929d4fd0b0817a9c2ccf2921273b74e448e1b99f8e008601ba60b697b600fecdd01bcd888e69da9f90ecc8626e23f8e45c7d0d2a7e4ba877ddea3a35e8095d6b6dc41e5342092411c4df32534d01ea5b019f09565d8c9778154e6d591b1ea89f6422c151d9d73d16b2e1310fdee491b5140c041fbb345ed4d3697eef43a13fbde1a12ca323d44e7bf4765673b50c9b165f521370a051e98267f815b11241d5040f06b9591ee9b230b9b9fcd6e78c0cc872888d7ef18620633205ae4688f558adf31e6bb75872ba5275179b66cebc94c8c9eba0d9c4de6c5c59a6bd47e85b1c87cb29963548d7250ae83ecaad2aacfb82ab6cdf843a8c5ea9b05ead3c9b69252ab4b89d385e3319e57641a2af05d3a2ca265777e67688bf2d4ab6b8b9b69d0735df8de93bc5bf7c52bc05f3d333c98fc76199838cb94cac3e67a1303436736cd14234f980ba383c50f2455b3ec67c445e707e6a3b5e3f8ab22fa091675acf615f57db70d6b989654340eaa6886fd9e10fa95c6422fe6b7c2c2759b7b227e8879a901acd8faca91a3caa107598f7dead7bfcf4f9d1e54d518f48e6292c071b32fe7add41175fdc8aa032cc48854fe07a1a1d502b6dd15f5ff5d0428e87ebc58fc2c8b161891b92e83e21e6a945f395851d2c887f6e1552a32cd79a30926adb40252d5dc618c79581cfddb091c0d1b83254977561b0726dbd07c7292a9df278ac537cd176735fc64e89e5477d9259e52eab70b0e7efee64b5c1754405e6b8a08f2fbe5e84c12722ce134f70fa8cfa703ab95830ba7544f22b1901efdafd645876b4e9c6d141dbf481d389072b3bb8e1f6a346d81ba4d0d56ec6f84dcb90590b83d6fbbf4e1bbdd9dbb68259c1b9a2cfb4aa40117bfed63f8a1fa4f6815c896da6b12b76e4f28cd90a0d19f0bc26d520cde4179e454cdb5520f827e4465da1554a1b3f1a483cdb095f156e7a39762df277349e84339fa4f6559fef9f2563a4f880df3ddea204440f7612d701516d6c7c7aa3cfcdd11dbd7a67bba7a0d5ede7325367be592ba34264cd98a32d0de59f05f2a07740cd6769b018e9c8f261a301a6bd425b51ce809a249d76c1c300112aff411edc095067f9802a808f948d0588b19221c9dc684062a8b72bd810abd4a34d69581b5e37489f947e27ba0db8e3e817f705e2ef65034d6afc1358cb9c04aa5fdb2121c94b0cce3a9d31313743c7a5de0baa5ce31079d8eabae4079afcd164fbd5a92d72a5c5a47d06266d3b127856a9059338294c40be5292472497cab5261835074bae039e3f381772af4924f29a42f11018101eff8417a6123d82220cd9e5b3ba99aa56a77b66bc8fb600e194468f52cf0f0e5aed28093a958a9528943d85072a3ba101a170c13b9d6b8eb47856f4170bbe9c5d7ec6d8b611cc1c38cdcc95ae4f5cb82b11f194f3157fcc591501d1036d7db9582d44f4514ab61078b1847cc0da9387bea0dff91a6eb8504bebd7bac20ad03d936cfae1be4b6739da819b0ecfbea9494a7d9306d58ec508a315b0e47296b6e176ffdd21645bd74bcd899b1b6c8f7a44a0d7700a71c33d82698f7d56b357f3973dabd21cc48379aeca9dacd3897c5b43d3ffdd8eac30290d81b571f32b9307b134cde77290569667c70de990625dc3f29f9132ea6c9336fe942e0d9dcd1fce1df0de92c00ba17adb85ddd490e537e833b5efd4f3dd9f5f09137c175cbcae79e8c61480561c3ee878b98463fa3992e08b0c302cb328de8c0bf2b102e43733a020948d7b7ace558d28b5899923d82ea903e838d3e6d1ddf51279da2216b1ee6aa4f4071a50aa628fb84387087805a1f1b059fc23999340eadb741ca9055cfeb9358b03af560bf16f0abdb867525d91d7a15b51e6619d65eb3c27c1b4ee768d18d5ec8de1609f78bcd3ed421aa284ead78348e0b0f60b2c4e39efcf30585dc7e049c43afc0e8133863d94938fbe758f6144ff372bfd9d531706b4534f3ef45258c38435a894b98441d4e22502da4c46f13ffad361669a4a634e4ab024e195454c29f5ecfb2efec55fd2033e8ee8bfefe91929bf192ff23dd9bda22abbe03b411bf9ad8dda8fd7e5395bdb7777ed06ea211fad6a91867c897afbf10f2d688d72bc2dcbcb83bffa4d7656c119ca38ec82e2a3bed3c692ed7e9fb21a4fcb8a33f13fc8026d507af80e60181e53c0d5d14b98c04b6f6dd7e06062714c89165a4715b04b9e81065e2e1ed61270b1a1b12f989fbad7fbc5ebf47780248313ac7e5d1c2d3520212a9d726981240af357623ed24644e6dd21d5761e4515e8ee141d0f01a330b18cd40141c13dc6ea734cf133f14e9feaa434167c3a83d2286b4d51c945cdf5b0fa19e948048df2884f611efd9e9ba341173b7d227e8de4e9920975710227683fd8f5c6c1729631d8e6cb90701089ec0166f66df23b48c86280954240b28626c4fcdbddb36beca35b4ffe455c9785eef88a1b86c001f3bb104c6ba3810e9b55ed95dd22dd13f14108daa090c651645bbefeb5f052304c0a85ceb79858ba9fd2825094d23467592490efdfb1c21c25f5b8d7602e195818739436b07c844b335fd4ccc68916c9d81cf5af8350ed28a0bc7ccb342f3dbb2ac9c47395d8e4cfb833485276934082a035ad1c3785ad0620166df408fb7b687bfbfe2c0a0851a9773a4b012ecb3806d6889df06719bf01b2fd2cd52668422b9db2e29478a8efec26daa29afa4008ec44418a90bdabe2a1e72846975bb64e3441b4b33c3ed7ac167388302277daf6de51", 0x1000}}, 0x1006) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001705000000000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000001040)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 01:57:40 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:40 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{}, {0x80000006}]}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 01:57:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) 01:57:40 executing program 1: r0 = socket(0x400000010, 0x802, 0x0) write(r0, &(0x7f0000000800)="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", 0xfc) 01:57:40 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 01:57:40 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{}, {0x80000006}]}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 01:57:41 executing program 0: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x1}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) 01:57:41 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:41 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) 01:57:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 01:57:41 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f00000004c0)={0x2, 0x2}) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000180004800a000100627246bd64636173742d6c696e6b000091bda659320aa663f307539b236ea615bcfa69f75236c2c53fcf6406ec775d80866de15aa872d16ac80fd36b5ae87e8d24c0d327"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="929a60eb056a1d27ed1dc60c080545118e41fc000000000000e1b929d239a08191653598dbdd2e311ee8ab6d33e078f4a069f6b8113c9fb340ef9608724cadb997ef78495b6c22cd11e15b4c3ab0aca69c1027ecdf9bc5359acfbb1b91d496ce3ddca9eaedcf8cb6c616e64cc11d1bc502", @ANYRES16=r2, @ANYBLOB="000126bd7000fddbdf25180000000c0003800800020005000000a0000280080002000900000008000100010000000800010000000000080002000000050008000200280300002c00038008000100000200000800020000020000080001006a0c0000080002000700000008000200ff0700000800020000040000040004003400038008000100ff03000008000200050000000800020004000000080002000700000008000100020000000800020002000000080002006e000000"], 0xc0}, 0x1, 0x0, 0x0, 0xc0}, 0x20048000) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000000)={{{@in=@private, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000140)={0x3}, 0x4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r5) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f00000003c0)={0x9, 0x6, "98388a9b17c99d5ac853f81b7ebee711594e0cca26eda86508e4b62121343a2f", 0x38, 0xd78f, 0x2, 0x9, 0x6c}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x49, 0x1, {0x4, 0x3, 0x6}}, 0x14) 01:57:41 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x1}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) 01:57:41 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000003280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x2, 0x0) [ 546.479402][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:41 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 546.630456][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:42 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc1004110, &(0x7f0000000180)={0x0, "02773a83676918c0d5ad4f98ac94c357ad94c357a53433820bf9583b3b6b09ae909d3ca5c7332890a0d8f5f19631d4c25ce649f85de649f8336dbfb0a25b2907"}) 01:57:42 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:42 executing program 0: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x1}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) 01:57:42 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc1004110, &(0x7f0000000180)={0x0, "02773a83676918c0d5ad4f98ac94c357ad94c357a53433820bf9583b3b6b09ae909d3ca5c7332890a0d8f5f19631d4c25ce649f85de649f8336dbfb0a25b2907"}) 01:57:42 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x1}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) 01:57:42 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d4"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 01:57:42 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc1004110, &(0x7f0000000180)={0x0, "02773a83676918c0d5ad4f98ac94c357ad94c357a53433820bf9583b3b6b09ae909d3ca5c7332890a0d8f5f19631d4c25ce649f85de649f8336dbfb0a25b2907"}) 01:57:43 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d4"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:43 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc1004110, &(0x7f0000000180)={0x0, "02773a83676918c0d5ad4f98ac94c357ad94c357a53433820bf9583b3b6b09ae909d3ca5c7332890a0d8f5f19631d4c25ce649f85de649f8336dbfb0a25b2907"}) 01:57:43 executing program 0: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x1}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) 01:57:43 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x1, &(0x7f0000000040)=0x5) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x1}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) 01:57:43 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xe583, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x11) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@none, 0x3f}) 01:57:43 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d4"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:43 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 01:57:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 01:57:43 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001705000000000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) 01:57:44 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e0"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:44 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = dup(r1) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000040)=0x2, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x10000, 0x0, 0x4, 0x0, 0x15f}, 0x14) 01:57:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="280100000000000003000000000000000300000000000000fdffffffffffffff0a000000050000002f6465762f7663732300000000000000020000000000000009"], 0x41) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000480), &(0x7f0000000080), {}, &(0x7f0000000440)=""/38, 0x26, &(0x7f0000000140)=""/121, &(0x7f0000000200), 0x1}, 0x6d) [ 549.587790][T13698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 01:57:44 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e0"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:44 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffff}}, 0x18) [ 549.788569][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x5) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) membarrier(0x0, 0x0) 01:57:45 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffff}}, 0x18) 01:57:45 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e0"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:45 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 01:57:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="280100000000000003000000000000000300000000000000fdffffffffffffff0a000000050000002f6465762f7663732300000000000000020000000000000009"], 0x41) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000480), &(0x7f0000000080), {}, &(0x7f0000000440)=""/38, 0x26, &(0x7f0000000140)=""/121, &(0x7f0000000200), 0x1}, 0x6d) 01:57:45 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = gettid() move_pages(r3, 0x0, 0x0, &(0x7f00000002c0)=[0x800, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x2) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 01:57:45 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffff}}, 0x18) 01:57:46 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036a89fe96f78"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x34ff, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00', 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 01:57:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="280100000000000003000000000000000300000000000000fdffffffffffffff0a000000050000002f6465762f7663732300000000000000020000000000000009"], 0x41) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000480), &(0x7f0000000080), {}, &(0x7f0000000440)=""/38, 0x26, &(0x7f0000000140)=""/121, &(0x7f0000000200), 0x1}, 0x6d) 01:57:46 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffff}}, 0x18) 01:57:46 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:57:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x34ff, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00', 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 551.672354][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:46 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) splice(r5, &(0x7f0000000040)=0x80000000, r4, &(0x7f0000000100)=0x4, 0x9, 0x4) close(r4) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f00000000c0)=0x7fc8d014) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r6, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/440], 0x14f) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0x81}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) [ 551.919161][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 552.066943][ C0] sd 0:0:1:0: [sg0] tag#3415 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 552.077710][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB: Test Unit Ready [ 552.084484][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.094316][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.104135][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.114023][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.123841][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.133677][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.143512][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.153350][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.163182][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.173012][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.182831][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.192671][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.202495][ C0] sd 0:0:1:0: [sg0] tag#3415 CDB[c0]: 00 00 00 00 00 00 00 00 01:57:47 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 01:57:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="280100000000000003000000000000000300000000000000fdffffffffffffff0a000000050000002f6465762f7663732300000000000000020000000000000009"], 0x41) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000480), &(0x7f0000000080), {}, &(0x7f0000000440)=""/38, 0x26, &(0x7f0000000140)=""/121, &(0x7f0000000200), 0x1}, 0x6d) 01:57:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x34ff, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00', 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 01:57:47 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:57:47 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667597ac9e036"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:47 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000002c0)) [ 552.507690][T13797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x34ff, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00', 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000100)={0x4, 0x0, 0x2, 0x1f, 'syz1\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 01:57:47 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000002c0)) 01:57:47 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:57:47 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$getregs(0x1a, r1, 0x0, &(0x7f0000000000)=""/186) 01:57:47 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:48 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000002c0)) [ 553.209766][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:48 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 01:57:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x100, 0x3, {0x0, 0x0, 0x100, 0x6}}) 01:57:48 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:57:48 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4847667"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:48 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000002c0)) [ 553.892069][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:57:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xfffffffffffffce9}]}]}]}]}, 0x40}}, 0x0) 01:57:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1802) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x8000a0, &(0x7f00000000c0)="1f"}) 01:57:49 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d08"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:49 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0)={[0x7]}, 0xffffffffffffffff, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000440)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') [ 554.270599][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 554.341553][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 554.348735][T13862] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 01:57:51 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$getregs(0x1a, r1, 0x0, &(0x7f0000000000)=""/186) 01:57:51 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0)={[0x7]}, 0xffffffffffffffff, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000440)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') 01:57:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xfffffffffffffce9}]}]}]}]}, 0x40}}, 0x0) 01:57:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x2c}, {0x45}, {0x6}]}) 01:57:51 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d08"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000004c0)="6d1f8c35321f452a5523311c109ee1a229cc94c48e51e9ed7866d4c64346bd64864b9bbc4b487b2071b96767f9c490ef8cfa3f0d9314e686b22776739a20bf1b5c5dbe2c6da95a3bf840b87476a701c56f5bbad774229987260a470a37235bc853038d6f22cd9b650f500a3dedf2422e2c698963c67032dd692193615367909f8e196f72040ad6026f4fd8a14c9f341c658ef32bce91feef9ef21ec781313bb71600009df2ce4daa42f8b0c250a3dc5d955b6f6de92605f30123444496b1ed745247d4927697b3c8e97ff9a9fb9f2aa97b3c0d5626c0d5e38289ad68b6ddff3c3b93f408fa59db05db44e947e32c5a69a99d1c4da040f452e6d3f875085bf8861c05a734ff48cf288980e75ca7ce60e55ed462a5c9803c3cacb971d05f854934ee55f4144016d13decd7aa2030b61a6a0ffa28f54ad6671e10ef0f482a4d3d713e1a4e24648202dd8ee689865c64712942148de53ba1095aa98bdd4a0e3a24fac38b5ce1fbbfc453bf53c230e552b8ee6e97c38a673aa3a22428deb0dd57f414ed50b95565bed52d1df59a8c0f73de3b90bae07e9006015a4a6ce56e3aa94d82e156c451250682b1f5882a05588d92dd4476b78b0fdaacdee78461ffd13affce6f8431e263a1c93cd88ba810d486ac25d1288a1de591228579aa9b4d36b5bf168f4976db923dab8475455c8772a9e2df776031bf74a5876619e6a76d3dcc11f60ac0135e202e3570e127b6772e7555861cf9a30e86ac651bfcead9d9156be7fb866b6c72cfec0c4094e09650fb99f88c42eab49a34936b133df2fed2527c17b3fdac9d0a3b77f7f0a14acf0b3b1fb557a12ced1e155aa84933f09d4dd748d6df48cf49c00581cb5e7edba8eee8f0dd4dc75850eb32e5ac3cba94190577a2b73f3909530fd2e25b145b8b8fd7746e47800e2c5e4d6a4c458754936935accf8e3b984fe64d27ea42f99b03e05c163b6fbcde9b2d3873bf8ea9bb3c936128b355e5e1d1e5da58ab40bb2ff2c14ef114692c38f8e7f753957e335e6cecfc7865263b3f419b8f28bc9392d4514be8ed6bd224a48274446c912c4a76930cdeb9ae61f9e078fe238ec14fca5fcaa9f7101a29a6517a2dfd8426213694266c4c291beaa8cef18c1aa53a744f9bf693d5783f14633893c19332a4cf8fca41484d2efbd6331f36f3aef4109846572739e1feace5c15019f93e4b30cadec499c0d76733a5d25d4960ed66e58231ca1b4d451b382d35b4aa75134141bd7718efab07733125cba3bc6d90010323991464b54abc920cc63961ff9de63a016c046bd3ba25b2e0859b5c51c3cf6d29d36ede1ac5991ef8d04f263422ef3045eb85784def963a3632483a7c29f738134efd7e6d78b4e1a1c37ca45c4c15fb4e64e30da29fa6e628567cf14e4cb628c29c28f9f9fb6f56a1b7f51fbf2c952916ddffbac085913aedb3"}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b7329f69b3307", 0xff8d}], 0x1) [ 556.225711][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xfffffffffffffce9}]}]}]}]}, 0x40}}, 0x0) 01:57:51 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0)={[0x7]}, 0xffffffffffffffff, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000440)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') 01:57:51 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d08"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 556.623679][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000004c0)="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"}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b7329f69b3307", 0xff8d}], 0x1) 01:57:51 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0)={[0x7]}, 0xffffffffffffffff, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000440)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') 01:57:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xfffffffffffffce9}]}]}]}]}, 0x40}}, 0x0) 01:57:52 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$getregs(0x1a, r1, 0x0, &(0x7f0000000000)=""/186) 01:57:52 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 557.330655][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:52 executing program 2: unshare(0x20400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000002c0)=r0, 0x4) 01:57:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x400454a4, 0x0) 01:57:52 executing program 5: pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000f0afccdf4800bb0c00020005000100080000003c0002000c00020005000100000000002c0001001400038000000000000000000000000000000000140004"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:57:52 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000004c0)="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"}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b7329f69b3307", 0xff8d}], 0x1) 01:57:52 executing program 2: unshare(0x20400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000002c0)=r0, 0x4) [ 557.949457][T13932] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:53 executing program 0: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$getregs(0x1a, r1, 0x0, &(0x7f0000000000)=""/186) 01:57:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x400454a4, 0x0) 01:57:53 executing program 2: unshare(0x20400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000002c0)=r0, 0x4) 01:57:53 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000004c0)="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"}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b7329f69b3307", 0xff8d}], 0x1) 01:57:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x400454a4, 0x0) 01:57:53 executing program 2: unshare(0x20400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000002c0)=r0, 0x4) 01:57:53 executing program 5: pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000f0afccdf4800bb0c00020005000100080000003c0002000c00020005000100000000002c0001001400038000000000000000000000000000000000140004"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:57:53 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e48476"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x400454a4, 0x0) 01:57:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r5}, 0x8) 01:57:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 559.158479][T13965] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002e00) 01:57:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c000f03000000000000000007000000", @ANYRES32=r2, @ANYBLOB="020000000a000200bbbbbbbbbbbb00000600050001"], 0x30}}, 0x0) 01:57:54 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 01:57:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r5}, 0x8) 01:57:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 01:57:54 executing program 1: mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev'], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) 01:57:54 executing program 5: pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000f0afccdf4800bb0c00020005000100080000003c0002000c00020005000100000000002c0001001400038000000000000000000000000000000000140004"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:57:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002e00) 01:57:55 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 560.221719][T14003] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:55 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 01:57:55 executing program 1: mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev'], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) 01:57:55 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002e00) 01:57:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000004e001f00ff07f4f9002304000a04f51107000100020100020800028001000000", 0x24) 01:57:55 executing program 1: mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev'], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) 01:57:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r5}, 0x8) [ 560.903187][T14018] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 01:57:55 executing program 1: mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev'], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) 01:57:56 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e4"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:56 executing program 5: pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000f0afccdf4800bb0c00020005000100080000003c0002000c00020005000100000000002c0001001400038000000000000000000000000000000000140004"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:57:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002e00) 01:57:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000004e001f00ff07f4f9002304000a04f51107000100020100020800028001000000", 0x24) 01:57:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 561.409013][T14034] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 561.431907][T14036] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 01:57:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000004e001f00ff07f4f9002304000a04f51107000100020100020800028001000000", 0x24) 01:57:56 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:56 executing program 4: unshare(0x2040400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)) 01:57:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r5}, 0x8) 01:57:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000004e001f00ff07f4f9002304000a04f51107000100020100020800028001000000", 0x24) 01:57:57 executing program 4: unshare(0x2040400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)) 01:57:57 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 562.418900][T14057] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 01:57:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:57 executing program 0: clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 01:57:57 executing program 4: unshare(0x2040400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)) 01:57:57 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:58 executing program 4: unshare(0x2040400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)) 01:57:58 executing program 0: clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 01:57:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:58 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:58 executing program 0: clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 01:57:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)) 01:57:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:58 executing program 0: clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 01:57:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:59 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)) 01:57:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:57:59 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 01:57:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)) 01:57:59 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:57:59 executing program 2: write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8}, 0x8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe9, 0x0, &(0x7f0000000080)) 01:57:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x2c, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:58:00 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x52) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x0, r3}) 01:58:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)) 01:58:00 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 01:58:00 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:58:00 executing program 2: write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8}, 0x8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe9, 0x0, &(0x7f0000000080)) 01:58:00 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x52) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x0, r3}) 01:58:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x2c, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:58:00 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 01:58:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7008c743d3bba54}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0xfffffffffffffe7e, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f126408}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 01:58:01 executing program 2: write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8}, 0x8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe9, 0x0, &(0x7f0000000080)) 01:58:01 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x52) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x0, r3}) 01:58:01 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) close(r4) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 566.213455][T14167] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:58:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x2c, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:58:01 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 01:58:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7008c743d3bba54}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0xfffffffffffffe7e, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f126408}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 01:58:01 executing program 2: write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x8}, 0x8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe9, 0x0, &(0x7f0000000080)) 01:58:01 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(0xffffffffffffffff) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) [ 566.728448][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:58:01 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x52) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x0, r3}) 01:58:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x2c, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:58:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 01:58:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7008c743d3bba54}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0xfffffffffffffe7e, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f126408}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) [ 567.117959][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 567.134051][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.148904][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:58:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 567.179896][T14195] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:58:02 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="32d7c0076da2ab2066", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001800010000000000000000000200000000000006000000001c0016801800018014000100fe8800000000000000000000000000010600150006"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:58:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 01:58:02 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(0xffffffffffffffff) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:58:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7008c743d3bba54}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0xfffffffffffffe7e, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f126408}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) [ 567.520935][T14200] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 567.609336][T14203] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 01:58:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 567.738265][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:58:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 01:58:02 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="32d7c0076da2ab2066", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001800010000000000000000000200000000000006000000001c0016801800018014000100fe8800000000000000000000000000010600150006"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 567.872658][T14210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 567.889266][T14210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.898852][T14210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 568.043591][ C0] sd 0:0:1:0: [sg0] tag#3417 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 568.054331][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB: Test Unit Ready [ 568.061080][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.070890][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.080716][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.090609][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.100481][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.110341][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.120181][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.129998][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.139857][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.149678][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.159538][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.169536][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.179358][ C0] sd 0:0:1:0: [sg0] tag#3417 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:03 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(0xffffffffffffffff) write$apparmor_current(r4, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:58:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 568.247049][T14217] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 568.559764][ C0] sd 0:0:1:0: [sg0] tag#3418 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 568.570415][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB: Test Unit Ready [ 568.577030][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.586899][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.596740][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.606600][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.616473][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.626317][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.636144][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.646003][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.657611][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.667461][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.677302][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.687150][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.697043][ C0] sd 0:0:1:0: [sg0] tag#3418 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e817f9ebfeb82ee2469fb21be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac70d88a276f6348b72fa678599f321d424bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b03b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4000800007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e00fc537c2370be3e431198daca0f4be445cfdfcf0d12a01a92080044e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a6757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d2646710befeb6f6030a10e69c903927a5c11effd62911abc72d261c0a7c7f08bb280c4fc342717c43d8e2192f121cedce1b0440d46fb174da4ac2da3bc30bf90ad8209f2644ff87aec60a58a490e012785e2d04eba58a52016a15d9e9bcec24a3230a7bff038000000000003a3964045af092de789b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459a0900000000000000567451000000000000000000da5fad4927bcc92b26fc45d76e64a428257381d2e46d6adc68cf5da791865bb3a834ecb6ed99147efcc54bcb21c16ccc8e65a5fc0b336a01c1fb7ea763dd96c7a04b16867bec7ab5ed9604a5f0496f5b974848e02e7c9de004994f32f297eac5d4fed9c2319ef5fa8a3935d4b602a6b3b864025bd060b75a70a204100b4f3c5218db746423a609e5ffe3fb0d39eb0f0461974c53d8828ea83d10eadbf8b7d5113ac5e7ca90030e7aa2ed6ab6060ddb28c138f6f0c6eada23b0bd8729ec44a9a82fc2274c2e6fe2bf1df1fa3e00e5a3e47803d02b83ea4ee010fd74db3c56662515574f59eb721f4cd317e6f02628e0fb4eb5710eeabdbd5d0876d330e3bc68cd852472cd8ec5c9ea85ee2d0f23cf5896f2c872e4efa277daa91dc6577688cadc"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 01:58:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 01:58:03 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="32d7c0076da2ab2066", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001800010000000000000000000200000000000006000000001c0016801800018014000100fe8800000000000000000000000000010600150006"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:58:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 568.948864][T14231] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 01:58:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 01:58:04 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="32d7c0076da2ab2066", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001800010000000000000000000200000000000006000000001c0016801800018014000100fe8800000000000000000000000000010600150006"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 569.280965][ C0] sd 0:0:1:0: [sg0] tag#3419 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.291628][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB: Test Unit Ready [ 569.298253][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.308154][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.317971][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.327799][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.337624][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.347451][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.357309][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.367253][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.374242][T14237] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 569.377207][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.395048][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.404901][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.414757][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.424603][ C0] sd 0:0:1:0: [sg0] tag#3419 CDB[c0]: 00 00 00 00 00 00 00 00 [ 569.432498][ C0] sd 0:0:1:0: [sg0] tag#3420 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.443107][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB: Test Unit Ready [ 569.449722][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.459576][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.469400][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.479570][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.489445][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.499305][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.509144][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.518978][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.528809][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.535823][ C1] sd 0:0:1:0: [sg0] tag#3422 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.538630][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.549052][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB: Test Unit Ready [ 569.558748][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.565253][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.574962][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.584653][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.594335][ C0] sd 0:0:1:0: [sg0] tag#3420 CDB[c0]: 00 00 00 00 00 00 00 00 [ 569.603987][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.611739][ C0] sd 0:0:1:0: [sg0] tag#3421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.621299][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.631765][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB: Test Unit Ready [ 569.641426][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.647915][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.657587][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.667272][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.676927][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.686619][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.696266][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.705953][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.715616][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.725307][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.734977][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.744674][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.754316][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.764001][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.773653][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.783336][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.792971][ C1] sd 0:0:1:0: [sg0] tag#3422 CDB[c0]: 00 00 00 00 00 00 00 00 [ 569.802696][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.819866][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 01:58:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 01:58:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 569.829688][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.839499][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.849312][ C0] sd 0:0:1:0: [sg0] tag#3421 CDB[c0]: 00 00 00 00 00 00 00 00 [ 569.992399][ C0] sd 0:0:1:0: [sg0] tag#3423 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.003008][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB: Test Unit Ready [ 570.009627][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.019499][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.029352][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.039184][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.049019][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.058837][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.068665][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.078502][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.088333][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.098155][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.108011][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.117832][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.127902][ C0] sd 0:0:1:0: [sg0] tag#3423 CDB[c0]: 00 00 00 00 00 00 00 00 [ 570.263997][ C0] sd 0:0:1:0: [sg0] tag#3424 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.274683][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB: Test Unit Ready [ 570.281464][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.291288][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.301129][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.311008][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.320849][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.330701][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.340529][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.350463][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.360295][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.370204][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.379971][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.389842][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.399671][ C0] sd 0:0:1:0: [sg0] tag#3424 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 570.666339][ C1] sd 0:0:1:0: [sg0] tag#3425 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.679364][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB: Test Unit Ready [ 570.686104][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.695989][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.705835][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.715698][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.725544][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.735391][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.745247][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.755054][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.764855][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.774763][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.784559][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.794394][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.804182][ C1] sd 0:0:1:0: [sg0] tag#3425 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:05 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000300)=@hat={'changehat ', 0x3, 0x5e, ['/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00', ']%[&\x00', '/proc/tty/ldiscs\x00', '/proc/tty/ldiscs\x00']}, 0x88) read$rfkill(r3, 0x0, 0x0) 01:58:05 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 01:58:05 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x9) 01:58:05 executing program 1: io_setup(0x9, &(0x7f0000000240)) io_setup(0x400, &(0x7f00000004c0)=0x0) io_destroy(r0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:58:06 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000140)={&(0x7f0000000100)=""/63, 0x3f}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 571.139724][ C0] sd 0:0:1:0: [sg0] tag#3439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 571.150431][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB: Test Unit Ready [ 571.157063][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.166980][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.176882][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.186792][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.197102][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.206997][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.216868][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.226843][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.236746][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.246644][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.256633][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.266540][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 571.276428][ C0] sd 0:0:1:0: [sg0] tag#3439 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0xc004743e, 0xfffffffffffffffd) 01:58:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 01:58:06 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r3, 0x0, 0x0) 01:58:06 executing program 1: io_setup(0x9, &(0x7f0000000240)) io_setup(0x400, &(0x7f00000004c0)=0x0) io_destroy(r0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:58:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0xc004743e, 0xfffffffffffffffd) 01:58:06 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0xff000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 01:58:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 01:58:07 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40045407, 0x0) 01:58:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 01:58:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0xc004743e, 0xfffffffffffffffd) 01:58:07 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r3, 0x0, 0x0) 01:58:07 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40045407, 0x0) 01:58:07 executing program 1: io_setup(0x9, &(0x7f0000000240)) io_setup(0x400, &(0x7f00000004c0)=0x0) io_destroy(r0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:58:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0xc004743e, 0xfffffffffffffffd) 01:58:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 01:58:07 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40045407, 0x0) 01:58:07 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r4) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r3, 0x0, 0x0) 01:58:08 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0xff000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 01:58:08 executing program 1: io_setup(0x9, &(0x7f0000000240)) io_setup(0x400, &(0x7f00000004c0)=0x0) io_destroy(r0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:58:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 01:58:08 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x40045407, 0x0) 01:58:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x0, 0x1a4, 0x40000, 0x1a4, 0x1a4, 0x244, 0x244, 0x244, 0x244, 0x244, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x48, 0x0, 0x0, 0x4c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d], 0x0, 0x164, 0x1a4, 0xa, {0x9000000}, [@common=@inet=@recent0={{0xf4, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'vlan0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa0, 0x0, {0xff00000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x334) 01:58:08 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 01:58:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0xc0}]}, 0x60}}, 0x0) 01:58:08 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000001000f90682410f060000000000000000", @ANYRES32, @ANYBLOB="033d0000000000006800120009000100766c616e00000000580002000c0002000200000002000000060001000000000040000300080001"], 0x9c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:58:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1a1c01) write(r0, &(0x7f00000001c0)='(', 0x20000339) [ 573.638970][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.715773][T14343] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:58:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0xc0}]}, 0x60}}, 0x0) 01:58:08 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fe010301080000000000000000060000000800506a0001000400000308000540000000010900020000000079020000005146a2c6dce302d6f8f70103f0c79698c4d6520e5e459bfd94f165c60cc1b535ca2e40040c5063b1dcef7d4ff2d7844b6e74db64a82b35d10e843485afc23ed798e453886bdcea7b1cd0806be65d11b03631b44957368c5ec1f09f4edb9de53847a437fbcef5539d5073d9d47d0823e484"], 0x30}}, 0x80) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 01:58:08 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000001000f90682410f060000000000000000", @ANYRES32, @ANYBLOB="033d0000000000006800120009000100766c616e00000000580002000c0002000200000002000000060001000000000040000300080001"], 0x9c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 574.103485][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:58:09 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0xff000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 01:58:09 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1a1c01) write(r0, &(0x7f00000001c0)='(', 0x20000339) 01:58:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0xc0}]}, 0x60}}, 0x0) 01:58:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 01:58:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x60, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0xa, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x60}}, 0x0) 01:58:09 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000001000f90682410f060000000000000000", @ANYRES32, @ANYBLOB="033d0000000000006800120009000100766c616e00000000580002000c0002000200000002000000060001000000000040000300080001"], 0x9c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 574.429922][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:58:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0xc0}]}, 0x60}}, 0x0) [ 574.548181][T14367] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 01:58:09 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1a1c01) write(r0, &(0x7f00000001c0)='(', 0x20000339) 01:58:09 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000001000f90682410f060000000000000000", @ANYRES32, @ANYBLOB="033d0000000000006800120009000100766c616e00000000580002000c0002000200000002000000060001000000000040000300080001"], 0x9c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 574.589227][T14370] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 01:58:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x60, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0xa, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x60}}, 0x0) [ 574.794987][T14376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:58:09 executing program 5: lstat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa1c83d594616631686ec9cbb32a146175dd106736d173f0fc7e36e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40d2fbea75e16a61fd063f02435053acb78dcdd1274e00da971f7ee096d775c78e11e34bd5522d45cc36c244"], 0x14f) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)}, {0x0}, {&(0x7f0000000100)="17aadc3b931ec00dd7351cafa00ec48aa819b68cf61858ab14d6e148c04d798fc555809d77895656416a8218d91d1182c10b93d312a5103a79f111a8e37b1e4e84fa4a2146125a087ee038517197047f24791cf9", 0x54}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000058000000000000001701000002000000410000006e38bac7670843e8d5b71b5b4a179fdd732d794144e895df94ba5dd02effccc7b0e6b87524524a4691aa5f67adef69469d38734518d45c53ddd82f80cb73af894b0000001800000000000000170100000400000004000000000000001800000000000000170100000300"/160], 0xa0}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="a53e6566c1b25b916214dc026ff455871f1c574b2b3af49c7efbb826c4c446f374b4e1c2443e305853067d4fd89403c40f77bfa2e0f1f0c11b46e119c53cfb76f0b3a59cf6c08f0ae3f92c039c69c1864ec0955157b284e04f5e279e0bcfa4c29d0796ff8c480dd7116530d6ece3fb41c6d0fb037752f13bacb9f29b9c60", 0x7e}, {&(0x7f0000000580)="a2925f76b59d213548f5b5e1664e876ad88688dbae52ebd9fe31619867d6077f8c77d72d371846f9a224183a2ae052f2cfaa0b667a14c0d778a2bc0d05a8db338269f64a540ad4fa0d49d15f24dad1efbc7051eb0a90d5f7232ad509", 0x5c}], 0x2, &(0x7f0000000600)=[@op={0x18}, @iv={0xa0, 0x117, 0x2, 0x89, "088e6a17016a184dff237d88ac1bc7f2d8cc96490a88342869c1b88ed2dee52d5ddf0347ccc69dd0c0dc18fe3c2c4084cc0079d5f502671ef80cf776ff5a67f376ec149211c559e50af8a5bc341d6f17554b0e30d61563101482342c8eb51c6b28c2f85386e6d3ff9122011c8c95326c0c3ed6fbf8d5dbe760d6cefd0a5b822d94ce4b545536eb568c"}], 0xb8, 0x40010}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)="aaf96c9721561c6554754c6f9b09d45d2f0d7d11648275121112f23c14d1c6aa97eed512aa59b4509744e2f774a4c06f9c3a0da7301348f1d5b3da3edf781f24fb506ab465f181c629b87cb317916664dc78ed8223d1bcde5114358c4b846ecfb6152e126137128dabf48ffd73d3211c5a727a4722b127", 0x77}, {&(0x7f0000000780)="daa864ebc166e22e291bb46b0025e47f40089e2cbb4b202a15f2be97012a96cbcf8ca3c8e4f4a165d616460a7f556a150e625394ae72a07fc8d340f16b41462459ba81f006d7ada02409343cf6727ce9d69906e5220d5b5ad18e84abae1748e8dc9492f57213b54fc3", 0x69}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000004}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}], 0x4, 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0x0, 0xd0, 0xd0, 0x1d0, 0xd0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0xffffffff, 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x307) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:58:10 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1a1c01) write(r0, &(0x7f00000001c0)='(', 0x20000339) [ 575.014730][T14380] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 575.108313][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 575.108444][ C1] sd 0:0:1:0: [sg0] tag#3441 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 575.125872][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB: Test Unit Ready [ 575.132552][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.142343][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.152835][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.156699][T14382] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 575.162653][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.162774][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.173236][T14382] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 575.182924][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.212517][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.222342][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.232150][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.241947][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.251811][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.261615][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.271419][ C1] sd 0:0:1:0: [sg0] tag#3441 CDB[c0]: 00 00 00 00 00 00 00 00 [ 575.284960][ C0] sd 0:0:1:0: [sg0] tag#3442 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 575.295676][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB: Test Unit Ready [ 575.302462][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.312419][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.322320][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.332200][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.342046][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.351874][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.361700][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.371579][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.381422][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.391252][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:10 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000002c0)={0x0, 0x0, 0xff000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 575.401108][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.410941][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.420763][ C0] sd 0:0:1:0: [sg0] tag#3442 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:10 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000000)={'batadv0\x00', @ifru_names='syz_tun\x00'}) 01:58:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 01:58:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x60, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0xa, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x60}}, 0x0) 01:58:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 575.683948][T14397] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 575.702277][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:58:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x8, 0x11, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x60}, 0x0) 01:58:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) unshare(0x400) poll(&(0x7f0000000000)=[{}], 0x20000000000000f3, 0x0) 01:58:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x60, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0xa, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x60}}, 0x0) 01:58:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 576.078347][ T1] systemd[1]: Starting Load/Save RF Kill Switch Status... 01:58:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) unshare(0x400) poll(&(0x7f0000000000)=[{}], 0x20000000000000f3, 0x0) 01:58:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x80000008, 0x1, 0x0, 0x3000}, {0x1}]}) 01:58:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100005070100"/20, @ANYRES32=0x0, @ANYBLOB="00000100000000001c00128009000100766c616e000000000c00028006000500810000c0e1c142000a00010080000101"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="0f020000000000000000010000000c0099000000000002000000"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0xb4, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7f}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}]}}}, @IFLA_MASTER={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:58:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x8, 0x11, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x60}, 0x0) 01:58:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 01:58:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) unshare(0x400) poll(&(0x7f0000000000)=[{}], 0x20000000000000f3, 0x0) [ 576.793551][ T1] systemd[1]: Started Load/Save RF Kill Switch Status. 01:58:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x80000008, 0x1, 0x0, 0x3000}, {0x1}]}) 01:58:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) unshare(0x400) poll(&(0x7f0000000000)=[{}], 0x20000000000000f3, 0x0) 01:58:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100005070100"/20, @ANYRES32=0x0, @ANYBLOB="00000100000000001c00128009000100766c616e000000000c00028006000500810000c0e1c142000a00010080000101"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="0f020000000000000000010000000c0099000000000002000000"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0xb4, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7f}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}]}}}, @IFLA_MASTER={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:58:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x8, 0x11, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x60}, 0x0) 01:58:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x80000008, 0x1, 0x0, 0x3000}, {0x1}]}) 01:58:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x23, 0x8, 0x1, 0xf4, 0x36, 0x3, 0x3, 0x8, 0x3da, 0x38, 0x332, 0x4, 0x2d5, 0x20, 0x1, 0x7, 0x100, 0x7}, [{0x5, 0x98f5d48b, 0x7, 0x3ff, 0x44d, 0x2, 0xac2b, 0x3ff}, {0x6, 0x1, 0xf31, 0x8001, 0x5, 0x0, 0x8000, 0x8}], "e6adf1c382b46e1275ceb77e70", [[], [], [], [], [], []]}, 0x685) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 01:58:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100005070100"/20, @ANYRES32=0x0, @ANYBLOB="00000100000000001c00128009000100766c616e000000000c00028006000500810000c0e1c142000a00010080000101"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="0f020000000000000000010000000c0099000000000002000000"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0xb4, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7f}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}]}}}, @IFLA_MASTER={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:58:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x8, 0x11, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x60}, 0x0) 01:58:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x80000008, 0x1, 0x0, 0x3000}, {0x1}]}) 01:58:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0xbf, 0x0) 01:58:13 executing program 0: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) 01:58:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100005070100"/20, @ANYRES32=0x0, @ANYBLOB="00000100000000001c00128009000100766c616e000000000c00028006000500810000c0e1c142000a00010080000101"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="0f020000000000000000010000000c0099000000000002000000"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0xb4, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7f}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}]}}}, @IFLA_MASTER={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:58:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0xbf, 0x0) 01:58:13 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000"], 0x9b) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffd) 01:58:13 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10}, {0x10, 0x10d, 0xfff000}], 0x20}}], 0x2, 0x0) [ 578.654620][ C1] sd 0:0:1:0: [sg0] tag#3450 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 578.665325][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB: Test Unit Ready [ 578.672065][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.681957][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.691935][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.701860][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.711706][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.721530][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.731413][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.741263][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.751119][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.760963][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.773340][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.783200][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.793021][ C1] sd 0:0:1:0: [sg0] tag#3450 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0xbf, 0x0) 01:58:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x23, 0x8, 0x1, 0xf4, 0x36, 0x3, 0x3, 0x8, 0x3da, 0x38, 0x332, 0x4, 0x2d5, 0x20, 0x1, 0x7, 0x100, 0x7}, [{0x5, 0x98f5d48b, 0x7, 0x3ff, 0x44d, 0x2, 0xac2b, 0x3ff}, {0x6, 0x1, 0xf31, 0x8001, 0x5, 0x0, 0x8000, 0x8}], "e6adf1c382b46e1275ceb77e70", [[], [], [], [], [], []]}, 0x685) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 01:58:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ipvlan1\x00'}) [ 579.494245][ C1] sd 0:0:1:0: [sg0] tag#3451 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 579.504847][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB: Test Unit Ready [ 579.511664][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.521562][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.531514][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.541413][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.551314][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.561184][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.571078][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.582686][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0xbf, 0x0) [ 579.592520][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.602412][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.612297][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.622699][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 579.632569][ C1] sd 0:0:1:0: [sg0] tag#3451 CDB[c0]: 00 00 00 00 00 00 00 00 [ 579.659785][T14562] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.672401][T14562] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 579.683102][T14562] bond0: (slave ipvlan1): Error -95 calling set_mac_address 01:58:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x23, 0x8, 0x1, 0xf4, 0x36, 0x3, 0x3, 0x8, 0x3da, 0x38, 0x332, 0x4, 0x2d5, 0x20, 0x1, 0x7, 0x100, 0x7}, [{0x5, 0x98f5d48b, 0x7, 0x3ff, 0x44d, 0x2, 0xac2b, 0x3ff}, {0x6, 0x1, 0xf31, 0x8001, 0x5, 0x0, 0x8000, 0x8}], "e6adf1c382b46e1275ceb77e70", [[], [], [], [], [], []]}, 0x685) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) [ 579.700413][T14563] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.712952][T14563] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 579.723645][T14563] bond0: (slave ipvlan1): Error -95 calling set_mac_address 01:58:14 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1000007fffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000002c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x980912, 0x0, [], @value64}}) 01:58:14 executing program 4: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') exit(0x0) wait4(0x0, 0x0, 0x80000002, 0x0) lseek(r0, 0x7, 0x0) 01:58:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@private2}, 0x14) 01:58:14 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000"], 0x9b) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffd) 01:58:14 executing program 4: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') exit(0x0) wait4(0x0, 0x0, 0x80000002, 0x0) lseek(r0, 0x7, 0x0) 01:58:15 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1000007fffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000002c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x980912, 0x0, [], @value64}}) 01:58:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x12, 0x0, 0x5c}}) read(r0, &(0x7f0000e6d000)=""/384, 0x6d) 01:58:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 01:58:15 executing program 4: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') exit(0x0) wait4(0x0, 0x0, 0x80000002, 0x0) lseek(r0, 0x7, 0x0) [ 580.522879][ C1] sd 0:0:1:0: [sg0] tag#3452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 580.533479][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB: Test Unit Ready [ 580.540269][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.550162][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.560064][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.569883][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.579722][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.589585][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.599534][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.609414][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:15 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1000007fffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000002c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x980912, 0x0, [], @value64}}) [ 580.619147][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.629433][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.639173][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.649059][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.658950][ C1] sd 0:0:1:0: [sg0] tag#3452 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x12, 0x0, 0x5c}}) read(r0, &(0x7f0000e6d000)=""/384, 0x6d) 01:58:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x23, 0x8, 0x1, 0xf4, 0x36, 0x3, 0x3, 0x8, 0x3da, 0x38, 0x332, 0x4, 0x2d5, 0x20, 0x1, 0x7, 0x100, 0x7}, [{0x5, 0x98f5d48b, 0x7, 0x3ff, 0x44d, 0x2, 0xac2b, 0x3ff}, {0x6, 0x1, 0xf31, 0x8001, 0x5, 0x0, 0x8000, 0x8}], "e6adf1c382b46e1275ceb77e70", [[], [], [], [], [], []]}, 0x685) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 01:58:15 executing program 4: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') exit(0x0) wait4(0x0, 0x0, 0x80000002, 0x0) lseek(r0, 0x7, 0x0) 01:58:15 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1000007fffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000002c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x980912, 0x0, [], @value64}}) 01:58:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 01:58:16 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000"], 0x9b) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffd) 01:58:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x12, 0x0, 0x5c}}) read(r0, &(0x7f0000e6d000)=""/384, 0x6d) 01:58:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 581.274297][ C1] sd 0:0:1:0: [sg0] tag#3453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 581.284979][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB: Test Unit Ready [ 581.291728][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.301551][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.311380][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.321202][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.331165][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.341420][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.351230][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.361075][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x99) 01:58:16 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x105000, 0x0) socket$inet_tcp(0x2, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) 01:58:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c000) close(r0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x0) [ 581.370991][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.381019][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.390905][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.400747][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.410569][ C1] sd 0:0:1:0: [sg0] tag#3453 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x12, 0x0, 0x5c}}) read(r0, &(0x7f0000e6d000)=""/384, 0x6d) 01:58:16 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x105000, 0x0) socket$inet_tcp(0x2, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) 01:58:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x99) 01:58:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c000) close(r0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x0) 01:58:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 01:58:17 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x105000, 0x0) socket$inet_tcp(0x2, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) 01:58:17 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000"], 0x9b) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffd) 01:58:17 executing program 1: unshare(0x6020400) mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0x14) splice(r0, 0x0, r1, 0x0, 0x100400000, 0x0) 01:58:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x99) [ 582.423633][ C1] sd 0:0:1:0: [sg0] tag#3396 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 582.434247][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB: Test Unit Ready [ 582.440979][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.450930][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.461107][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c000) close(r0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x0) [ 582.470973][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.480880][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.490857][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.500683][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.510580][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:17 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000300)='\x00\x00\x03\x00\x00\x00\x00@\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214) [ 582.520445][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.530350][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.540354][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.550847][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.560793][ C1] sd 0:0:1:0: [sg0] tag#3396 CDB[c0]: 00 00 00 00 00 00 00 00 01:58:17 executing program 1: unshare(0x6020400) mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0x14) splice(r0, 0x0, r1, 0x0, 0x100400000, 0x0) 01:58:17 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x105000, 0x0) socket$inet_tcp(0x2, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) 01:58:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x99) 01:58:18 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000300)='\x00\x00\x03\x00\x00\x00\x00@\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214) 01:58:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c000) close(r0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x0) 01:58:18 executing program 1: unshare(0x6020400) mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0x14) splice(r0, 0x0, r1, 0x0, 0x100400000, 0x0) 01:58:18 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 01:58:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007050083cae4c2cf0658be04f300", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0080000008000100636273001c000200180001"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0xffffff7f, 0x1000000000000, &(0x7f0000000080), 0xf, &(0x7f0000000100), 0xb}], 0x492492492492642, 0x0) 01:58:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x3ff}) io_setup(0xa, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 01:58:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bc", 0xd8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0xe) ptrace$cont(0x20, r0, 0x0, 0x0) 01:58:18 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000300)='\x00\x00\x03\x00\x00\x00\x00@\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214) 01:58:18 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000005d000b0f000000000400ff0700000000c5a4079081f8f4b297bec3e68ab1cb8f0617f9e57924263d40d1f09e3df6223c792309804603f4080d1b56efa0ca232c5535068e107b6eaf5446df10d1bf607e240ca840", @ANYRES32, @ANYBLOB="00000000ff"], 0x68}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) 01:58:18 executing program 1: unshare(0x6020400) mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0x14) splice(r0, 0x0, r1, 0x0, 0x100400000, 0x0) 01:58:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007050083cae4c2cf0658be04f300", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0080000008000100636273001c000200180001"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0xffffff7f, 0x1000000000000, &(0x7f0000000080), 0xf, &(0x7f0000000100), 0xb}], 0x492492492492642, 0x0) 01:58:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x3ff}) io_setup(0xa, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 01:58:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000300)='\x00\x00\x03\x00\x00\x00\x00@\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214) 01:58:19 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000005d000b0f000000000400ff0700000000c5a4079081f8f4b297bec3e68ab1cb8f0617f9e57924263d40d1f09e3df6223c792309804603f4080d1b56efa0ca232c5535068e107b6eaf5446df10d1bf607e240ca840", @ANYRES32, @ANYBLOB="00000000ff"], 0x68}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) 01:58:19 executing program 1: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) 01:58:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007050083cae4c2cf0658be04f300", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0080000008000100636273001c000200180001"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0xffffff7f, 0x1000000000000, &(0x7f0000000080), 0xf, &(0x7f0000000100), 0xb}], 0x492492492492642, 0x0) 01:58:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x3ff}) io_setup(0xa, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 01:58:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x398733179b06be1e}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 01:58:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bc", 0xd8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0xe) ptrace$cont(0x20, r0, 0x0, 0x0) 01:58:21 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000005d000b0f000000000400ff0700000000c5a4079081f8f4b297bec3e68ab1cb8f0617f9e57924263d40d1f09e3df6223c792309804603f4080d1b56efa0ca232c5535068e107b6eaf5446df10d1bf607e240ca840", @ANYRES32, @ANYBLOB="00000000ff"], 0x68}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) 01:58:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007050083cae4c2cf0658be04f300", @ANYRES32=r0, @ANYBLOB="00000000ffffffff0080000008000100636273001c000200180001"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0xffffff7f, 0x1000000000000, &(0x7f0000000080), 0xf, &(0x7f0000000100), 0xb}], 0x492492492492642, 0x0) 01:58:21 executing program 1: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) 01:58:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x3ff}) io_setup(0xa, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 01:58:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x398733179b06be1e}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 01:58:22 executing program 1: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) 01:58:22 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000005d000b0f000000000400ff0700000000c5a4079081f8f4b297bec3e68ab1cb8f0617f9e57924263d40d1f09e3df6223c792309804603f4080d1b56efa0ca232c5535068e107b6eaf5446df10d1bf607e240ca840", @ANYRES32, @ANYBLOB="00000000ff"], 0x68}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) 01:58:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x398733179b06be1e}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 01:58:22 executing program 4: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) 01:58:22 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0), 0x10) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)={r7}, 0x8) r8 = dup2(r5, r1) dup3(r8, r0, 0x0) 01:58:22 executing program 1: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) 01:58:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bc", 0xd8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0xe) ptrace$cont(0x20, r0, 0x0, 0x0) 01:58:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 01:58:25 executing program 4: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) 01:58:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x398733179b06be1e}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 01:58:25 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0), 0x10) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)={r7}, 0x8) r8 = dup2(r5, r1) dup3(r8, r0, 0x0) 01:58:25 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) 01:58:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 01:58:25 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)) 01:58:25 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) 01:58:25 executing program 4: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) 01:58:25 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0), 0x10) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)={r7}, 0x8) r8 = dup2(r5, r1) dup3(r8, r0, 0x0) 01:58:26 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) 01:58:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bc", 0xd8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0xe) ptrace$cont(0x20, r0, 0x0, 0x0) 01:58:28 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)) 01:58:28 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 01:58:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000380)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 01:58:28 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) 01:58:28 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0), 0x10) r3 = socket(0x40000000001e, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)={r7}, 0x8) r8 = dup2(r5, r1) dup3(r8, r0, 0x0) 01:58:28 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)) 01:58:28 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x6], [0x0, 0x2000000], [0x23]], [], [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 01:58:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x400000000000010, 0x3, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x2, 0x0, 0x0}, @in6=@remote}}, {{@in=@private}, 0x0, @in=@loopback}}, 0xb) 01:58:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x38}}, 0x0) 01:58:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x840000000002, 0x3, 0xfd) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 01:58:29 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)='\b') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001500000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}], 0x1}, 0x4004045) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x3) splice(r4, 0x0, r3, 0x0, 0x60000, 0x0) 01:58:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x840000000002, 0x3, 0xfd) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 01:58:31 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)) 01:58:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x38}}, 0x0) 01:58:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x400000000000010, 0x3, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x2, 0x0, 0x0}, @in6=@remote}}, {{@in=@private}, 0x0, @in=@loopback}}, 0xb) 01:58:31 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)='\b') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001500000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}], 0x1}, 0x4004045) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x3) splice(r4, 0x0, r3, 0x0, 0x60000, 0x0) 01:58:31 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000280)={&(0x7f00000006c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 01:58:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x400000000000010, 0x3, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x2, 0x0, 0x0}, @in6=@remote}}, {{@in=@private}, 0x0, @in=@loopback}}, 0xb) 01:58:32 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)='\b') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001500000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}], 0x1}, 0x4004045) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x3) splice(r4, 0x0, r3, 0x0, 0x60000, 0x0) 01:58:32 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x8001, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 01:58:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x840000000002, 0x3, 0xfd) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 01:58:32 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000280)={&(0x7f00000006c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 01:58:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x38}}, 0x0) 01:58:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000080)={0x1ff, 0x0, 0x201b, 0x39, 0x1ff, {0x0, 0x4}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:58:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x400000000000010, 0x3, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x4, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x2, 0x0, 0x0}, @in6=@remote}}, {{@in=@private}, 0x0, @in=@loopback}}, 0xb) 01:58:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x840000000002, 0x3, 0xfd) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 01:58:32 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000280)={&(0x7f00000006c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 01:58:32 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)='\b') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001500000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}], 0x1}, 0x4004045) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x3) splice(r4, 0x0, r3, 0x0, 0x60000, 0x0) 01:58:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x38}}, 0x0) 01:58:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xef, &(0x7f0000000280)="0100000087e7322758c6834e198cdd0032a5b60a00008024c30e478947d190ac004c45bec9c683f53b506b8c5893d35500c52c65ec345a8b75c1c317c3da822e15355c2ae26ba533fad72a1d53a9ff5b4ac51e08dcaeeb01eeb2dd9b56de54fcea571b152f7d37491e04451c39d280ce8f3e884f9fb89a03d9044039c0000000315b94e725cbeb577a6c389d700a86f72fef2d3ef6a652b3b6ac4da4bef79bf691e77dcc77507a000cda091ab030cbd53f8ee4144a07828645b627f995961d26131b108bc38ad3037a2c09dfccd5064d1252927049f1d306bf13ea27d7abbb8db2a77d45b79969e0792337566e931e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:58:33 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000280)={&(0x7f00000006c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 01:58:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x668}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:33 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'security.', '\x00'}) creat(&(0x7f0000000300)='./bus\x00', 0x0) 01:58:33 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 01:58:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/12, 0xc}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x3f74, 0x49) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 598.531976][T14932] __nla_validate_parse: 9 callbacks suppressed [ 598.532015][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 598.565962][ C0] sd 0:0:1:0: [sg0] tag#3397 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 598.577669][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB: Test Unit Ready [ 598.584443][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.598578][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.608430][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.618339][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.628307][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.638178][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.648025][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.657900][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.668615][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.678479][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.688347][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.698302][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.708181][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.718045][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.727885][ C0] sd 0:0:1:0: [sg0] tag#3397 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.769600][T14947] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 598.806139][T14950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:58:33 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 01:58:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x668}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/12, 0xc}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x3f74, 0x49) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 01:58:34 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) [ 599.190314][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:58:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x668}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 599.437101][ C0] sd 0:0:1:0: [sg0] tag#3398 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 599.447831][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB: Test Unit Ready [ 599.454447][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.464266][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.474074][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.483893][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.493710][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.503526][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.513333][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.523151][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.533016][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.542848][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.552661][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.562474][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.572282][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.582108][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.591912][ C0] sd 0:0:1:0: [sg0] tag#3398 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.600821][ C0] sd 0:0:1:0: [sg0] tag#3399 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 599.611429][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB: Test Unit Ready [ 599.618141][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.626149][T14976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 599.627955][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.628074][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.656752][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.666595][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.676420][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.686239][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.696146][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.705967][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.715820][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.725643][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.735470][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.745291][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.755123][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.764944][ C0] sd 0:0:1:0: [sg0] tag#3399 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.773857][ C0] sd 0:0:1:0: [sg0] tag#3400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 599.784457][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB: Test Unit Ready [ 599.791155][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.801449][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.811288][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.821216][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.831040][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.840879][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.850706][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.860650][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.870577][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/12, 0xc}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x3f74, 0x49) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 599.880442][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.890380][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.900288][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.910171][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.920058][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.929924][ C0] sd 0:0:1:0: [sg0] tag#3400 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 01:58:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xef, &(0x7f0000000280)="0100000087e7322758c6834e198cdd0032a5b60a00008024c30e478947d190ac004c45bec9c683f53b506b8c5893d35500c52c65ec345a8b75c1c317c3da822e15355c2ae26ba533fad72a1d53a9ff5b4ac51e08dcaeeb01eeb2dd9b56de54fcea571b152f7d37491e04451c39d280ce8f3e884f9fb89a03d9044039c0000000315b94e725cbeb577a6c389d700a86f72fef2d3ef6a652b3b6ac4da4bef79bf691e77dcc77507a000cda091ab030cbd53f8ee4144a07828645b627f995961d26131b108bc38ad3037a2c09dfccd5064d1252927049f1d306bf13ea27d7abbb8db2a77d45b79969e0792337566e931e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:58:36 executing program 0: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 01:58:36 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 01:58:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x668}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:36 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'security.', '\x00'}) creat(&(0x7f0000000300)='./bus\x00', 0x0) 01:58:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/12, 0xc}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x3f74, 0x49) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 601.473388][ C1] sd 0:0:1:0: [sg0] tag#3401 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 601.484001][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB: Test Unit Ready [ 601.490739][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.500543][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.510409][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.520271][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.530106][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.539911][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.549724][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.559554][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.569359][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.579154][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.588948][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.598746][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.608543][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.618342][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.628146][ C1] sd 0:0:1:0: [sg0] tag#3401 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 01:58:36 executing program 0: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) [ 601.959113][ C1] sd 0:0:1:0: [sg0] tag#3402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 601.969744][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB: Test Unit Ready [ 601.976448][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.986317][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 601.996201][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.005997][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.015828][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.025656][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.035467][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.045286][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.055101][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.064915][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.074728][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.085515][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.095318][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.105112][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.114897][ C1] sd 0:0:1:0: [sg0] tag#3402 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 01:58:37 executing program 0: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 01:58:37 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 01:58:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "3fec17e4e486184d40560333ee6fc0ee658252"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1000006) ioctl$TCSETSF(r0, 0x541a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "deff000000004000"}) 01:58:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x19) writev(r2, &(0x7f00000023c0), 0x10000000000003ff) [ 602.538756][ C1] sd 0:0:1:0: [sg0] tag#3413 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 602.549454][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB: Test Unit Ready [ 602.556182][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.566136][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.576023][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.585921][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.595801][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.605701][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.615606][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.625582][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.635476][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.645370][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.655257][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.665148][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.675039][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.685037][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.694946][ C1] sd 0:0:1:0: [sg0] tag#3413 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.703970][ C1] sd 0:0:1:0: [sg0] tag#3414 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 602.714639][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB: Test Unit Ready [ 602.721384][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.734021][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.743912][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.753828][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.763713][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.773597][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.783498][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.793395][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.803281][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.813179][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.823091][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.832980][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.842908][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.852829][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.862713][ C1] sd 0:0:1:0: [sg0] tag#3414 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.871761][ C1] sd 0:0:1:0: [sg0] tag#3415 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 602.882500][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB: Test Unit Ready [ 602.889308][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.899265][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.909204][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.919188][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.929555][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.939519][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.949441][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.959385][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.969319][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.979270][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.989202][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 602.999157][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.009866][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.019821][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 603.029761][ C1] sd 0:0:1:0: [sg0] tag#3415 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 01:58:38 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01000000000000000000000000000400047f09000200737d7a30000000000900f19f0000000000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 603.322348][T15041] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 01:58:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xef, &(0x7f0000000280)="0100000087e7322758c6834e198cdd0032a5b60a00008024c30e478947d190ac004c45bec9c683f53b506b8c5893d35500c52c65ec345a8b75c1c317c3da822e15355c2ae26ba533fad72a1d53a9ff5b4ac51e08dcaeeb01eeb2dd9b56de54fcea571b152f7d37491e04451c39d280ce8f3e884f9fb89a03d9044039c0000000315b94e725cbeb577a6c389d700a86f72fef2d3ef6a652b3b6ac4da4bef79bf691e77dcc77507a000cda091ab030cbd53f8ee4144a07828645b627f995961d26131b108bc38ad3037a2c09dfccd5064d1252927049f1d306bf13ea27d7abbb8db2a77d45b79969e0792337566e931e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:58:39 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'security.', '\x00'}) creat(&(0x7f0000000300)='./bus\x00', 0x0) 01:58:39 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 01:58:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x19) writev(r2, &(0x7f00000023c0), 0x10000000000003ff) 01:58:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02", 0x3}], 0x1}, 0x0) 01:58:39 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01000000000000000000000000000400047f09000200737d7a30000000000900f19f0000000000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 604.784620][T15063] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 604.803371][ C1] sd 0:0:1:0: [sg0] tag#3416 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 604.813960][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB: Test Unit Ready [ 604.820727][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.830529][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.840338][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.850180][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.860001][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.869815][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.879638][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.889435][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.899230][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.909028][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.918829][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:58:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x19) writev(r2, &(0x7f00000023c0), 0x10000000000003ff) [ 604.928630][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.938463][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.948301][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.958119][ C1] sd 0:0:1:0: [sg0] tag#3416 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 01:58:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02", 0x3}], 0x1}, 0x0) 01:58:40 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fef64017db9820000000003b08d403f7ff633b27e59aa144175dff06736d17c3f2c876c699010000000000000025da3f0fc762378de573e470244902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a7"], 0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6286, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x40000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200084, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) [ 605.383019][ C1] sd 0:0:1:0: [sg0] tag#3417 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 605.393744][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB: Test Unit Ready [ 605.400550][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.410703][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.420646][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.430575][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.440479][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.450409][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.460325][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.470263][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.480189][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.490118][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.500041][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.509982][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.519914][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.529830][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.539728][ C1] sd 0:0:1:0: [sg0] tag#3417 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 01:58:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x2, &(0x7f0000000000)) 01:58:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x19) writev(r2, &(0x7f00000023c0), 0x10000000000003ff) 01:58:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02", 0x3}], 0x1}, 0x0) 01:58:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/12, 0xc}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xef, &(0x7f0000000280)="0100000087e7322758c6834e198cdd0032a5b60a00008024c30e478947d190ac004c45bec9c683f53b506b8c5893d35500c52c65ec345a8b75c1c317c3da822e15355c2ae26ba533fad72a1d53a9ff5b4ac51e08dcaeeb01eeb2dd9b56de54fcea571b152f7d37491e04451c39d280ce8f3e884f9fb89a03d9044039c0000000315b94e725cbeb577a6c389d700a86f72fef2d3ef6a652b3b6ac4da4bef79bf691e77dcc77507a000cda091ab030cbd53f8ee4144a07828645b627f995961d26131b108bc38ad3037a2c09dfccd5064d1252927049f1d306bf13ea27d7abbb8db2a77d45b79969e0792337566e931e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:58:43 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'security.', '\x00'}) creat(&(0x7f0000000300)='./bus\x00', 0x0) 01:58:43 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01000000000000000000000000000400047f09000200737d7a30000000000900f19f0000000000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:58:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x2, &(0x7f0000000000)) 01:58:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02", 0x3}], 0x1}, 0x0) 01:58:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) [ 608.351537][T15110] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 01:58:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x2, &(0x7f0000000000)) 01:58:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) 01:58:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x574702, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x40000) 01:58:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x574702, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x40000) 01:58:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x2, &(0x7f0000000000)) 01:58:43 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 01:58:46 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01000000000000000000000000000400047f09000200737d7a30000000000900f19f0000000000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:58:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) 01:58:46 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x574702, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x40000) 01:58:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 01:58:46 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 01:58:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_create(&(0x7f0000000000)='\xde', 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) [ 611.362254][ T1] systemd[1]: systemd-journald.service: Start operation timed out. Terminating. 01:58:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 01:58:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) [ 611.566110][T15145] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 01:58:46 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x574702, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x40000) 01:58:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_create(&(0x7f0000000000)='\xde', 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) 01:58:47 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x2], [0xb048], [0x23]], [], [{0x0, 0x1}]}) 01:58:47 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 01:58:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 01:58:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_create(&(0x7f0000000000)='\xde', 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) 01:58:47 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6747a475) clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) 01:58:47 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x2], [0xb048], [0x23]], [], [{0x0, 0x1}]}) 01:58:47 executing program 0: unshare(0x200) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x20}, &(0x7f0000000080)=0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000100)={0x80000000000000, 0x10000, 0x37, 0xb, 0x12}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setns(r0, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) 01:58:47 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 01:58:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_create(&(0x7f0000000000)='\xde', 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) 01:58:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 612.940982][T15179] IPVS: ftp: loaded support on port[0] = 21 01:58:48 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x2], [0xb048], [0x23]], [], [{0x0, 0x1}]}) 01:58:48 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6747a475) clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) 01:58:48 executing program 0: unshare(0x200) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x20}, &(0x7f0000000080)=0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000100)={0x80000000000000, 0x10000, 0x37, 0xb, 0x12}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setns(r0, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) 01:58:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x15, 0xfffffffffffffffe, 0x314) 01:58:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) recvmmsg(r2, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000580)=""/113, 0x71}], 0x1}}], 0x1, 0x0, 0x0) [ 613.909005][T15220] IPVS: ftp: loaded support on port[0] = 21 01:58:48 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x2], [0xb048], [0x23]], [], [{0x0, 0x1}]}) 01:58:48 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:49 executing program 5: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', 0x1}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 01:58:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x15, 0xfffffffffffffffe, 0x314) [ 614.166075][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:58:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x1b}) 01:58:49 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6747a475) clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) [ 614.440027][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:58:49 executing program 5: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', 0x1}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 01:58:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x15, 0xfffffffffffffffe, 0x314) 01:58:49 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:49 executing program 0: unshare(0x200) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x20}, &(0x7f0000000080)=0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000100)={0x80000000000000, 0x10000, 0x37, 0xb, 0x12}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setns(r0, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) 01:58:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="5c000000100001050000000000000000fb000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r2], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f0000000100)}], 0xea, 0x0) [ 615.047796][ T982] tipc: TX() has been purged, node left! [ 615.119515][T15280] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 615.127969][T15280] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 615.136088][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 615.145764][T15280] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave [ 615.155644][T15280] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) 01:58:50 executing program 5: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', 0x1}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) [ 615.166201][T15284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:58:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x15, 0xfffffffffffffffe, 0x314) [ 615.334753][T15283] IPVS: ftp: loaded support on port[0] = 21 01:58:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="5c000000100001050000000000000000fb000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r2], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f0000000100)}], 0xea, 0x0) 01:58:50 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6747a475) clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) 01:58:50 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:58:50 executing program 5: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', 0x1}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 01:58:51 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) [ 616.243406][T15315] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 616.252324][T15315] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 616.260627][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 616.270326][T15315] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave [ 616.280515][T15315] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) 01:58:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x3, 0x400, 0xd}, 0x40) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1081, r0}, 0x38) [ 616.291855][T15314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:58:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="5c000000100001050000000000000000fb000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r2], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="37109699359b8d5fc23a3e31bb2eb155af8d1150d21a50968133ac092cd76418145d475f0bafc09c9db3ec6aefd12d3f3c0012f63b4cbbe15134782cc353471443c97521f0693e7cb2c90308e046d08010171e8fc889615f1d5b2385eeae0a6b55a4923468e6d6e077e9f0781e17b1c1dbafe30b7625eb6dec3822eea5a23531dfb910a994cc43c5bfb1ca2e376874f749ed7758e2c46b7006816c749959d71878af5cca801bb7bb1b346c3dabbcedb51bf94a4bd407365e95a2f460fe0958ca4d1e235c3d65b31422b7c58a1768d38c5ab4d5ee1c03b45195b730aab9bf0c5afe0a99bf00c4b6eda71b9103547d97846823f6178532cab8f8ad7983c3f3b2c8aac1d4737c591faf5010d0baa6e9e86a9aa2395f5b396b8d10c2e05b94144c5c81d2be10f07f2e7cb4271147d6c83a71f4f682a18bb0acd4b6ebffa780f1c3f5be358a2652a243fe2436623ae9b03b03e3caf8b15240f7d389bb9140809df594bf5a0baa74fe449f7fd88e4e2aa2431699ea630d1f44dcaa819689a53f52cb40b9227ce3b31968ffa5b379fcb14daa2ce8ed6a0e9be5d1dce11fb6cf8e4a7ce7be97a21b3a5c06d53ae182c8979d05013c89311ccfe2408f8e2d12cb5d4216efbea006cbd661c05df7203e75d1bcdb6274da55caf22eed5a816424202730ca43eb5367a53419c50187c3bb62b1fb5e3f565db829ccea2913d8eb3917971ad08bdeac2cc0320f91b306723d1bc9b8ce3a12fbc11fcee6ada8d21ad2b62811b87e4d0d220da841eafd6cd2eebcf443b0f1a3120abb5f1df81838197c60aeb77433ae88c50036f832392873a3394153734cd5a939eb832352b8ee7561feb21b0973137a632e4ce09fba0ec7ec4d6f32f3a421d0abddc4c595c6d22be1bb268eba5773e1496ebce0e17a5d6d0078776c910840cc19b72f6efaba331ee03c4ff861edf55d0e5b78d96283a6e52897155fcb8cfedd276aa59bbc24315e667176a2095ba5cfbe9903a5c2b7787fa530e30e03f29ea1ab7cf1c2cead961a0fe31706eebb1b8583e99735f4ad0c4b925c889b28143062ac496a9f89cb83f43854bb8913d7efb327384584a644474528e5d485d0eb8529f801c7696d2655fbd23c2422831c593557ff8481fbd05f98a5e91efb9e133223fc3f105d927fb59c7ca87b009daffb3cd20a7f150aa034c91cd1de453cdd56a49f4b3200b12be7a1f7672df31b1d0daa1cb545a2d3a3c9bf3007e89b86a3154dd9be67b86daf7cee228162bc8f7577dfe09c5cf3414aede473b8836000af4ef683d51f69b498655c15806a3b61503dcaf26c5a726c1ef09559caed8afc45b7ed0e609b6faceb3e3725a9350bf38ae609889b69ea3b3bfcbfad9113b9b8a24508dcdddedf50434e0125e483ae4fbc151b855e9559c174610f16c031c232d6a886931ecf6812d6ccc21b21a60482e7acd27ee7a57175c4ad06bccff1c18a506120cff71b851334725a118627ea748e8b8bf5ce6388c664479370a3f90084f7f6ae00492e72dc7c3484b8cc1ae93e896699c83058d55f1a4370ff2da3d940f40db3669ef5a928e28b6ee1b3ecaed11b8a8365d25ac4b3b89d25bdc01ffc2d2d19cec9eb9cf34ba6be9b755819a119d4b0385b82ff52b5da826baa16c413ad3287829a3fb9550c7a636a452270f893af3714f6b9ce52a3dc0c099656d4dd8737f976b67690ad2b5b9452940ce5f6fe10bf1a1c5b403b2abbb22b8594db28b0145a92e74d60feb00e66de7ad320ce112c848f7799bdbf59aeb14f7a9c5114b78f882ed3b5cc8f14f493424b66b992af2833b6e20bf831ebb8bbf5593180719181c4d33d24836195a62314773372fa1c2f1f1fbad29dde3d8cb4178bf4952bdd13303607e69131365c7f577688aae7bba07c7a97977f2220e8c8c7e0416743fd6fec13e333d0e2a1e20e7bc4bab6b6b12fa735ecab229bee6f28b453b538bc9a564482842d3cc8ea09b37062e1e2a219866371ce4e6c98c3ab3e63859454b8b44cf7ad776bdf92d26a77fe13251762c2a86f5a8c1a54c3f540447f3c2468add5ea54d75f29ba807d8b7e0370c44aeffb94e1162cfc186350f51ac45a7ca76c9a135e98d98413aeeba6a9d5ace7506b9d28f43b2e4441a2489ef3da96fe33207e5f22076596037258bf0bc7d0e4d7b365f55a7b9b2d2739ae0489ec0c38f0b5d7671541177e7ba51c2af0e09e8e3c73fb788b4d6fa60ebf9c9265d0a58bec2b9d6238fcfd98b2ed228c8ed9fc0ea3e4e8f22fb5949d3f52a6976c9518a84addbd6327109966ff92f9edabe3e88746ea2aa9416bfa88a446a74ee9ca4bb67c40061250762c073136d060ca393b7ba0ad4a25e23951e7b6022d329c24135be2679a103463bafcc14914f82ff630a07e93421be6c0ddd0413fac15da762bb6ff5756cf5cd5f881c37da681ae263328d239c85f6db9aabaee6d381ab13bc48fc0771d1463aa01c9ef63090e91901d731dc0404b4bb91ad9d6c8886d1254ec71fbfe9d25aa8e7ae7994d1dac0938fd07f6c7d0b57319c133e8a74f64c8a11ea4c15eea5f6c11f12bda539442571ef9f22fefc69782329c57b9a560cf5676757ab7ec88560a729acfa4bfcd0371e0a3c55afe5722f1af96bb580b9bd3db08754e235a747120026a612c54473ad9b7fbd13afa05f01a091b9198eb4ab4e2051468f8d76cef7d7e8f7eea39ecca6261febdb1997026310a48c9e56ec28478552dd0a77dc17a5cea20e219ec5fac8913acbe429e07178accfb3a1fe132dcbf103897e37b022e2ec9f4aeb3e222bb909f30e26db087fd0548811b1db1edce3602db6ce46d900ce2f2e7e682d977ec8a131da632dafe808531f86e61b30e47721725722cd20c38f8c325fa6ca832ff6b257903d3bda70d7f36a9cfaa8f8e612c455c65b4cbb1248dd3437bb46632ce6838666893bcf3cb75980d0a8f2b49af07b19aa05eca02242f5cb6af06a54c09a4025ec6e555157c9138b7db72ed5dc0de08ded7e6d85e792a56469a2eb1cba79aabed4c01884fcfecbc30929adb58d027e6f0ec8712621b3231879736b4163b95819450dcf450f73cec249d3d86cc529a08ecebe84ffba8232fa3fab708fb505d7463d1b58f70f130f1876034c084cb41a1bbf79b00022e272333facc19ceddbfa7977e820d25439a295198f45b310b86dc56ad2374c2d7733150b251ed11b708717e7c1a2f92734633da9de9af0b13109e6f000eccea33e3402ebab776ab3e3ea2b8a3056eedf2f9d694663a18bd0d7697dc795b2a8d03e378b86c4c50113d875f6d2f9e7c2b1fdd378e31e9ed80e3092cc826e0b0d156757762fd6d9939db402525b8609e154edd4a358c788f125e5d917459c5837bbf0b0c2050298f9a67f9db0fd49eb68ed293eb8a2e417d159448b94faeabebe7bbe0dee70ae62f1eafef20d820db4da9e44dcf89413c96836cb10bfb4b3d654b5b69d7bcc95d0a8a3d323ece47e93f72ed57b9eafb0653dbd658d3c2862b290091f49a52b3b47bfa5e833d73f6f1a0f11c3843b5cbe617cdb0e2d4109056eefda3c22aa73cd1e125946c84990846939af4e1bcfb36211472890c364125fadcaaee5d6615f48a495b9527bd5cb29e15e47500de7b4e9be9536a4e773a9b1f079d1cbbed8548495cd34eada77a4929e327924c6494d51d3a1f474063cc529c2f890d11c51e100a60d90bf727d3fa00de3157876ee6c4b07ce1acf36597518b6dd60d120245a134ab8f7e84d79548166c91faf6b4dbcae0b7f1c6ac5640c3a04fda1ba5d6673f95744c7eccae21e36b9eb65d54eee8773530de266189c036eade72d940037e8fe689a0286f0fd2e1a152e1dc9420b22eb7bbcb68451115b41f47b99c449d5318acd2fa76824620c40f7bf9ed4d242ced8f0c4c2144732afb0953bb234ec0daeb80fc5263317724ed85a6e5398fe6c8e4c29e33c09c596f8157423bbe2384b7b23e1c64cffe7007f7b46acddae0e4c64ab40f159d37e2b5f7b2a1440b9934d9476769c71312e5f5bca9454b38450d857aa37b67592a03549dbeebba9bc49c17e6c32ff127b8bee0e6822fa2d040eb6208c01674eaaa6727e1c7eb121497b6299e3b5bba1f4eab099cc0785fd0e4a6697fbaf2b805166150f072a46f7473ae20281bf1f579261a85df40cb6eb8533408512c165755aa94d501943df42cd4b7ec56106f0b1f4b864221d4ff2d4f24768ff71ff9e8febae36897641c12ede8b471dcbe5122c54355e6b36aad194c88cecc9596c266432fd2f4cbaff737dacb342f121cadbc3b411c940649b33808f2d70217820469036e2dc36252d0024f114cb025ef4ddc66fe6aa058c1c92f93770e80be051af3bda2c1f73320b5fbc17532987ac5ae6d98dbaad9a798a3be7d4e4e00c05f351aaae722764baaa6e80e62ed49575bc90fd4ddc40b9b3058e09c58bfd338fa35b8fe5dfae3dbc32d1eff3756dfed511cac9ba80719c6f7ab6012f31204c4888ec60897884728a45e941bbd69efb2dc8e4165ac90ab7ad39a37bbd908843e623a3935dcf26d220ec9d9807d724512b106214f7c7d8fd6e0c5947c9bba7c9dd2f11bff85e2d7cd8eab0d3f526918c4a2ae776dd64f2c7f03f51608a1c47f5294af18cf1b8418860245c9bf23ef0d6109e24032f251b6606a66548cc9b4ac6542fbd31dc502527ee5bb8c790b7167e8a1222dd812400e64b534ad9670c47a68e0bbb52178131fc0a07b667330cb272d9000917503c38506af1aa248e6a11f278712d0b20c05a6e2fb53c70c3d293a80bcb1984c210c10fbf290e078f42ad20cf58f89ac2e4d4663dd6b160421107211555f05b76e64f198459108fee3fda094fc66b9e37e5dffcc673cb6f947cd5a6c2e4fa1d8ee8c44f06ef096da2942e3932e43e76c69012e69668e36fb58f1ee476d5461f2f4bdd9f052b19a196ce07a052926f1ccb6a45f56c1f2da2c32c458b7f98c116aaa8e7f9846ee7cf1e6bbe9d3b75bb48ece26409f24736a8ab6c2ed9a4389283ee9a163595271fe1df32b403a776138ebc7c8534a9e5f932944b50abcd44e1a1fa30823277d120bb0ef9b6886e18920e7bc7bd77380c721964be1a039b90380f9765fc78a6eb9c8ee42fd61beeff643c048f88e34fde6f46e7d15b43cd4444e12cea00cef95335cb9e33f41bc8426b50779e56e62ccf5e0f2c4a550c159d2f68817cea6082d0dfe8e13a1ce782c481ca8786598124d41537d317b78654269ff948e5804976f25b90548478dbaa148fa88fb65d8ef9756fef8c7729a3f5c3e18c530759c5ec2462a8fbb2b29e97d2652beecd8989c1d70b0d16f4ccdcc21d5c299d3d06a56012205ce3f3789e145bf95a8f2f2b724f6da09395ad56ec561f8c1611e79a113395b2f44923a0050d47dbf053057c472222bf17b90383ef24099b0b569569e330f33db2ee4c052dcadf04d9f017bd6b2d38b515d1a08600b3559f6f636e8fadb6897cfc35aca3334e8d1d29c7e8fe6cacf3779ebde505e6aa130293512fe59f99b5273bd22297af637a8621314211ff1aa22ac682a4b28e2deb2fec84787492396798c50b63e0d307d0ff36e9c368f468394802f5a3acf5f78bdbe1f6bfe6b472cf08a391e51a30078131b0b9a343affeb3631f72f82c74a6b3a941c950c61ca8078cef3239a7f90cee6ea461376d97acad94b4c9f2d3d7e4883ddc023de70de2d256e94cf0fe0c933dbb940f7d39cd192b81c4c9c9aa3b730e798833437e225158cb5327c3e689c0949652a624ce307a27057873581826ea4366fb3c309471623bc455d", 0x1000}], 0x1, &(0x7f0000000100)}], 0xea, 0x0) 01:58:51 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 617.036436][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 617.068087][T15351] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 617.076315][T15351] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 617.084685][T15351] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 617.094446][T15351] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave [ 617.104290][T15351] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) 01:59:00 executing program 0: unshare(0x200) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x20}, &(0x7f0000000080)=0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000100)={0x80000000000000, 0x10000, 0x37, 0xb, 0x12}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setns(r0, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) 01:59:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, &(0x7f0000000000)) 01:59:00 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x101, 0x2, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {0x4}, {0x3}, {0x8001}, {0x135d}, {0x6}], 0x6}}}) 01:59:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="5c000000100001050000000000000000fb000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r2], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="37109699359b8d5fc23a3e31bb2eb155af8d1150d21a50968133ac092cd76418145d475f0bafc09c9db3ec6aefd12d3f3c0012f63b4cbbe15134782cc353471443c97521f0693e7cb2c90308e046d08010171e8fc889615f1d5b2385eeae0a6b55a4923468e6d6e077e9f0781e17b1c1dbafe30b7625eb6dec3822eea5a23531dfb910a994cc43c5bfb1ca2e376874f749ed7758e2c46b7006816c749959d71878af5cca801bb7bb1b346c3dabbcedb51bf94a4bd407365e95a2f460fe0958ca4d1e235c3d65b31422b7c58a1768d38c5ab4d5ee1c03b45195b730aab9bf0c5afe0a99bf00c4b6eda71b9103547d97846823f6178532cab8f8ad7983c3f3b2c8aac1d4737c591faf5010d0baa6e9e86a9aa2395f5b396b8d10c2e05b94144c5c81d2be10f07f2e7cb4271147d6c83a71f4f682a18bb0acd4b6ebffa780f1c3f5be358a2652a243fe2436623ae9b03b03e3caf8b15240f7d389bb9140809df594bf5a0baa74fe449f7fd88e4e2aa2431699ea630d1f44dcaa819689a53f52cb40b9227ce3b31968ffa5b379fcb14daa2ce8ed6a0e9be5d1dce11fb6cf8e4a7ce7be97a21b3a5c06d53ae182c8979d05013c89311ccfe2408f8e2d12cb5d4216efbea006cbd661c05df7203e75d1bcdb6274da55caf22eed5a816424202730ca43eb5367a53419c50187c3bb62b1fb5e3f565db829ccea2913d8eb3917971ad08bdeac2cc0320f91b306723d1bc9b8ce3a12fbc11fcee6ada8d21ad2b62811b87e4d0d220da841eafd6cd2eebcf443b0f1a3120abb5f1df81838197c60aeb77433ae88c50036f832392873a3394153734cd5a939eb832352b8ee7561feb21b0973137a632e4ce09fba0ec7ec4d6f32f3a421d0abddc4c595c6d22be1bb268eba5773e1496ebce0e17a5d6d0078776c910840cc19b72f6efaba331ee03c4ff861edf55d0e5b78d96283a6e52897155fcb8cfedd276aa59bbc24315e667176a2095ba5cfbe9903a5c2b7787fa530e30e03f29ea1ab7cf1c2cead961a0fe31706eebb1b8583e99735f4ad0c4b925c889b28143062ac496a9f89cb83f43854bb8913d7efb327384584a644474528e5d485d0eb8529f801c7696d2655fbd23c2422831c593557ff8481fbd05f98a5e91efb9e133223fc3f105d927fb59c7ca87b009daffb3cd20a7f150aa034c91cd1de453cdd56a49f4b3200b12be7a1f7672df31b1d0daa1cb545a2d3a3c9bf3007e89b86a3154dd9be67b86daf7cee228162bc8f7577dfe09c5cf3414aede473b8836000af4ef683d51f69b498655c15806a3b61503dcaf26c5a726c1ef09559caed8afc45b7ed0e609b6faceb3e3725a9350bf38ae609889b69ea3b3bfcbfad9113b9b8a24508dcdddedf50434e0125e483ae4fbc151b855e9559c174610f16c031c232d6a886931ecf6812d6ccc21b21a60482e7acd27ee7a57175c4ad06bccff1c18a506120cff71b851334725a118627ea748e8b8bf5ce6388c664479370a3f90084f7f6ae00492e72dc7c3484b8cc1ae93e896699c83058d55f1a4370ff2da3d940f40db3669ef5a928e28b6ee1b3ecaed11b8a8365d25ac4b3b89d25bdc01ffc2d2d19cec9eb9cf34ba6be9b755819a119d4b0385b82ff52b5da826baa16c413ad3287829a3fb9550c7a636a452270f893af3714f6b9ce52a3dc0c099656d4dd8737f976b67690ad2b5b9452940ce5f6fe10bf1a1c5b403b2abbb22b8594db28b0145a92e74d60feb00e66de7ad320ce112c848f7799bdbf59aeb14f7a9c5114b78f882ed3b5cc8f14f493424b66b992af2833b6e20bf831ebb8bbf5593180719181c4d33d24836195a62314773372fa1c2f1f1fbad29dde3d8cb4178bf4952bdd13303607e69131365c7f577688aae7bba07c7a97977f2220e8c8c7e0416743fd6fec13e333d0e2a1e20e7bc4bab6b6b12fa735ecab229bee6f28b453b538bc9a564482842d3cc8ea09b37062e1e2a219866371ce4e6c98c3ab3e63859454b8b44cf7ad776bdf92d26a77fe13251762c2a86f5a8c1a54c3f540447f3c2468add5ea54d75f29ba807d8b7e0370c44aeffb94e1162cfc186350f51ac45a7ca76c9a135e98d98413aeeba6a9d5ace7506b9d28f43b2e4441a2489ef3da96fe33207e5f22076596037258bf0bc7d0e4d7b365f55a7b9b2d2739ae0489ec0c38f0b5d7671541177e7ba51c2af0e09e8e3c73fb788b4d6fa60ebf9c9265d0a58bec2b9d6238fcfd98b2ed228c8ed9fc0ea3e4e8f22fb5949d3f52a6976c9518a84addbd6327109966ff92f9edabe3e88746ea2aa9416bfa88a446a74ee9ca4bb67c40061250762c073136d060ca393b7ba0ad4a25e23951e7b6022d329c24135be2679a103463bafcc14914f82ff630a07e93421be6c0ddd0413fac15da762bb6ff5756cf5cd5f881c37da681ae263328d239c85f6db9aabaee6d381ab13bc48fc0771d1463aa01c9ef63090e91901d731dc0404b4bb91ad9d6c8886d1254ec71fbfe9d25aa8e7ae7994d1dac0938fd07f6c7d0b57319c133e8a74f64c8a11ea4c15eea5f6c11f12bda539442571ef9f22fefc69782329c57b9a560cf5676757ab7ec88560a729acfa4bfcd0371e0a3c55afe5722f1af96bb580b9bd3db08754e235a747120026a612c54473ad9b7fbd13afa05f01a091b9198eb4ab4e2051468f8d76cef7d7e8f7eea39ecca6261febdb1997026310a48c9e56ec28478552dd0a77dc17a5cea20e219ec5fac8913acbe429e07178accfb3a1fe132dcbf103897e37b022e2ec9f4aeb3e222bb909f30e26db087fd0548811b1db1edce3602db6ce46d900ce2f2e7e682d977ec8a131da632dafe808531f86e61b30e47721725722cd20c38f8c325fa6ca832ff6b257903d3bda70d7f36a9cfaa8f8e612c455c65b4cbb1248dd3437bb46632ce6838666893bcf3cb75980d0a8f2b49af07b19aa05eca02242f5cb6af06a54c09a4025ec6e555157c9138b7db72ed5dc0de08ded7e6d85e792a56469a2eb1cba79aabed4c01884fcfecbc30929adb58d027e6f0ec8712621b3231879736b4163b95819450dcf450f73cec249d3d86cc529a08ecebe84ffba8232fa3fab708fb505d7463d1b58f70f130f1876034c084cb41a1bbf79b00022e272333facc19ceddbfa7977e820d25439a295198f45b310b86dc56ad2374c2d7733150b251ed11b708717e7c1a2f92734633da9de9af0b13109e6f000eccea33e3402ebab776ab3e3ea2b8a3056eedf2f9d694663a18bd0d7697dc795b2a8d03e378b86c4c50113d875f6d2f9e7c2b1fdd378e31e9ed80e3092cc826e0b0d156757762fd6d9939db402525b8609e154edd4a358c788f125e5d917459c5837bbf0b0c2050298f9a67f9db0fd49eb68ed293eb8a2e417d159448b94faeabebe7bbe0dee70ae62f1eafef20d820db4da9e44dcf89413c96836cb10bfb4b3d654b5b69d7bcc95d0a8a3d323ece47e93f72ed57b9eafb0653dbd658d3c2862b290091f49a52b3b47bfa5e833d73f6f1a0f11c3843b5cbe617cdb0e2d4109056eefda3c22aa73cd1e125946c84990846939af4e1bcfb36211472890c364125fadcaaee5d6615f48a495b9527bd5cb29e15e47500de7b4e9be9536a4e773a9b1f079d1cbbed8548495cd34eada77a4929e327924c6494d51d3a1f474063cc529c2f890d11c51e100a60d90bf727d3fa00de3157876ee6c4b07ce1acf36597518b6dd60d120245a134ab8f7e84d79548166c91faf6b4dbcae0b7f1c6ac5640c3a04fda1ba5d6673f95744c7eccae21e36b9eb65d54eee8773530de266189c036eade72d940037e8fe689a0286f0fd2e1a152e1dc9420b22eb7bbcb68451115b41f47b99c449d5318acd2fa76824620c40f7bf9ed4d242ced8f0c4c2144732afb0953bb234ec0daeb80fc5263317724ed85a6e5398fe6c8e4c29e33c09c596f8157423bbe2384b7b23e1c64cffe7007f7b46acddae0e4c64ab40f159d37e2b5f7b2a1440b9934d9476769c71312e5f5bca9454b38450d857aa37b67592a03549dbeebba9bc49c17e6c32ff127b8bee0e6822fa2d040eb6208c01674eaaa6727e1c7eb121497b6299e3b5bba1f4eab099cc0785fd0e4a6697fbaf2b805166150f072a46f7473ae20281bf1f579261a85df40cb6eb8533408512c165755aa94d501943df42cd4b7ec56106f0b1f4b864221d4ff2d4f24768ff71ff9e8febae36897641c12ede8b471dcbe5122c54355e6b36aad194c88cecc9596c266432fd2f4cbaff737dacb342f121cadbc3b411c940649b33808f2d70217820469036e2dc36252d0024f114cb025ef4ddc66fe6aa058c1c92f93770e80be051af3bda2c1f73320b5fbc17532987ac5ae6d98dbaad9a798a3be7d4e4e00c05f351aaae722764baaa6e80e62ed49575bc90fd4ddc40b9b3058e09c58bfd338fa35b8fe5dfae3dbc32d1eff3756dfed511cac9ba80719c6f7ab6012f31204c4888ec60897884728a45e941bbd69efb2dc8e4165ac90ab7ad39a37bbd908843e623a3935dcf26d220ec9d9807d724512b106214f7c7d8fd6e0c5947c9bba7c9dd2f11bff85e2d7cd8eab0d3f526918c4a2ae776dd64f2c7f03f51608a1c47f5294af18cf1b8418860245c9bf23ef0d6109e24032f251b6606a66548cc9b4ac6542fbd31dc502527ee5bb8c790b7167e8a1222dd812400e64b534ad9670c47a68e0bbb52178131fc0a07b667330cb272d9000917503c38506af1aa248e6a11f278712d0b20c05a6e2fb53c70c3d293a80bcb1984c210c10fbf290e078f42ad20cf58f89ac2e4d4663dd6b160421107211555f05b76e64f198459108fee3fda094fc66b9e37e5dffcc673cb6f947cd5a6c2e4fa1d8ee8c44f06ef096da2942e3932e43e76c69012e69668e36fb58f1ee476d5461f2f4bdd9f052b19a196ce07a052926f1ccb6a45f56c1f2da2c32c458b7f98c116aaa8e7f9846ee7cf1e6bbe9d3b75bb48ece26409f24736a8ab6c2ed9a4389283ee9a163595271fe1df32b403a776138ebc7c8534a9e5f932944b50abcd44e1a1fa30823277d120bb0ef9b6886e18920e7bc7bd77380c721964be1a039b90380f9765fc78a6eb9c8ee42fd61beeff643c048f88e34fde6f46e7d15b43cd4444e12cea00cef95335cb9e33f41bc8426b50779e56e62ccf5e0f2c4a550c159d2f68817cea6082d0dfe8e13a1ce782c481ca8786598124d41537d317b78654269ff948e5804976f25b90548478dbaa148fa88fb65d8ef9756fef8c7729a3f5c3e18c530759c5ec2462a8fbb2b29e97d2652beecd8989c1d70b0d16f4ccdcc21d5c299d3d06a56012205ce3f3789e145bf95a8f2f2b724f6da09395ad56ec561f8c1611e79a113395b2f44923a0050d47dbf053057c472222bf17b90383ef24099b0b569569e330f33db2ee4c052dcadf04d9f017bd6b2d38b515d1a08600b3559f6f636e8fadb6897cfc35aca3334e8d1d29c7e8fe6cacf3779ebde505e6aa130293512fe59f99b5273bd22297af637a8621314211ff1aa22ac682a4b28e2deb2fec84787492396798c50b63e0d307d0ff36e9c368f468394802f5a3acf5f78bdbe1f6bfe6b472cf08a391e51a30078131b0b9a343affeb3631f72f82c74a6b3a941c950c61ca8078cef3239a7f90cee6ea461376d97acad94b4c9f2d3d7e4883ddc023de70de2d256e94cf0fe0c933dbb940f7d39cd192b81c4c9c9aa3b730e798833437e225158cb5327c3e689c0949652a624ce307a27057873581826ea4366fb3c309471623bc455d", 0x1000}], 0x1, &(0x7f0000000100)}], 0xea, 0x0) 01:59:00 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) [ 625.416200][T15376] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 625.424816][T15376] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 625.433084][T15376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 625.442753][T15376] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave [ 625.452472][T15376] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) [ 625.701512][T15386] IPVS: ftp: loaded support on port[0] = 21 01:59:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) 01:59:00 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\v`', 0x0) write(r0, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000040)) 01:59:00 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 01:59:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, &(0x7f0000000000)) 01:59:01 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\v`', 0x0) write(r0, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000040)) 01:59:01 executing program 4: r0 = memfd_create(&(0x7f0000000040)=']G/}LA~\x1b\xa3\xe0\xdb\xe5\xb3\x01\xe7\n7', 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) setsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0x0) 01:59:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, &(0x7f0000000000)) 01:59:01 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f00000001a00c9cd57821515e72100000a01"], 0xf0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:59:01 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 01:59:01 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) 01:59:01 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0045405, 0x4000000000790000) 01:59:01 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\v`', 0x0) write(r0, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000040)) [ 626.997798][ T982] tipc: TX() has been purged, node left! 01:59:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x0, @planes=0x0}) 01:59:02 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0045405, 0x4000000000790000) 01:59:02 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x50, 0x13, 0x10aeb7656b528f63, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 01:59:02 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\v`', 0x0) write(r0, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000040)) 01:59:02 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, &(0x7f0000000000)) 01:59:02 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f00000001a00c9cd57821515e72100000a01"], 0xf0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:59:02 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0045405, 0x4000000000790000) 01:59:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14}}, 0x78}}, 0x0) 01:59:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00010d000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ff000a0002005e550c2c90af66b2"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 01:59:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000180)) [ 627.928015][T15464] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 01:59:03 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f00000001a00c9cd57821515e72100000a01"], 0xf0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:59:03 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0045405, 0x4000000000790000) 01:59:03 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe7, 0x0, &(0x7f0000000080)) 01:59:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14}}, 0x78}}, 0x0) 01:59:03 executing program 5: mkdir(&(0x7f0000000080)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) listxattr(&(0x7f00000000c0)='./control\x00', &(0x7f0000000180)=""/33, 0x21) [ 628.455993][T15477] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 01:59:03 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4000041) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000001a740)={0x1d, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="20c0d61abf090000950000ff37e98c523a67c0268a0aeca15ae11f00000000000400551b00800000a55b5000e7ffffff18000000080000000000000002000000850000002b0000009500000000000000850000007310000002d1040005000000"], &(0x7f0000000040)='GPL\x00', 0x40, 0x1000, &(0x7f0000000600)=""/4096, 0x41000, 0x5, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f000001a6c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f000001a700)={0x0, 0x2, 0x0, 0x5}, 0x10}, 0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x7fff}, [@ldst={0x3, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff4}, @generic={0x3, 0xa, 0x7, 0x6, 0x36525b3}, @generic={0xd9, 0x0, 0x1, 0x5, 0x3ff}, @map={0x18, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xd, 0x0, 0x4}, 0x10}, 0x78) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000000)='./bus\x00', 0x600c2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1fe}, 0x8) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 01:59:03 executing program 5: mkdir(&(0x7f0000000080)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) listxattr(&(0x7f00000000c0)='./control\x00', &(0x7f0000000180)=""/33, 0x21) 01:59:03 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f00000001a00c9cd57821515e72100000a01"], 0xf0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:59:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14}}, 0x78}}, 0x0) 01:59:03 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe7, 0x0, &(0x7f0000000080)) 01:59:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00010d000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ff000a0002005e550c2c90af66b2"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 628.963366][T15491] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 01:59:04 executing program 5: mkdir(&(0x7f0000000080)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) listxattr(&(0x7f00000000c0)='./control\x00', &(0x7f0000000180)=""/33, 0x21) 01:59:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x5}]}]}]}]}], {0x14}}, 0x78}}, 0x0) 01:59:04 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe7, 0x0, &(0x7f0000000080)) 01:59:04 executing program 0: unshare(0x2a000400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) [ 629.665151][T15501] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 01:59:04 executing program 5: mkdir(&(0x7f0000000080)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) listxattr(&(0x7f00000000c0)='./control\x00', &(0x7f0000000180)=""/33, 0x21) 01:59:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00010d000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ff000a0002005e550c2c90af66b2"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 01:59:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x6c60, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 01:59:05 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe7, 0x0, &(0x7f0000000080)) 01:59:05 executing program 0: unshare(0x2a000400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 01:59:05 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000580)=0x20, 0x4) 01:59:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000b6989cd372a", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 01:59:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00010d000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ff000a0002005e550c2c90af66b2"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 630.522554][T15520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 630.690745][T15535] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:59:05 executing program 0: unshare(0x2a000400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) [ 630.754394][T15541] team0: Port device veth3 added 01:59:05 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000580)=0x20, 0x4) 01:59:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20600) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 01:59:06 executing program 0: unshare(0x2a000400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) [ 631.296249][T15543] team0: Port device veth3 removed 01:59:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000580)=0x20, 0x4) [ 631.445253][T15529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:59:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20600) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 01:59:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) syz_genetlink_get_family_id$batadv(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:59:06 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) 01:59:06 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x10001) 01:59:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000b6989cd372a", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 01:59:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000580)=0x20, 0x4) [ 632.051865][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:59:07 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x10001) 01:59:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20600) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 01:59:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x16d}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:59:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) syz_genetlink_get_family_id$batadv(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:59:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000b6989cd372a", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 01:59:07 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x10001) [ 632.900957][T15611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:59:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) syz_genetlink_get_family_id$batadv(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:59:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20600) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 01:59:08 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) 01:59:08 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x10001) 01:59:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000b6989cd372a", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}}]}, 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 01:59:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) syz_genetlink_get_family_id$batadv(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000fb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 633.619784][T15634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:59:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000180)="5e8d03", 0x3, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) [ 633.817173][T15649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:59:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) 01:59:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1b6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 01:59:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007041dfffd946f6105021c14000a1f000003002808000800100004000300", 0x24}], 0x1}, 0x0) 01:59:10 executing program 4: r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 01:59:10 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) 01:59:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) 01:59:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 01:59:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007041dfffd946f6105021c14000a1f000003002808000800100004000300", 0x24}], 0x1}, 0x0) 01:59:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) 01:59:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000180)="ce044a00ec4d50ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0634e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 01:59:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 01:59:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1b6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 01:59:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) 01:59:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007041dfffd946f6105021c14000a1f000003002808000800100004000300", 0x24}], 0x1}, 0x0) 01:59:11 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) 01:59:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 01:59:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000180)="ce044a00ec4d50ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0634e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1b6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 01:59:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007041dfffd946f6105021c14000a1f000003002808000800100004000300", 0x24}], 0x1}, 0x0) 01:59:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x18, 0x21, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], @ndisc_ra}}}}, 0x4a) 01:59:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000180)="ce044a00ec4d50ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0634e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 01:59:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 01:59:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1b6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 637.488038][T15712] dccp_invalid_packet: P.Data Offset(104) too large 01:59:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}]}}}]}, 0x3c}}, 0x0) 01:59:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000180)="ce044a00ec4d50ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0634e9ff000099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 01:59:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 01:59:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7ffe) [ 638.356961][T15736] ===================================================== [ 638.363958][T15736] BUG: KMSAN: uninit-value in streebog_xlps+0x645/0x7c0 [ 638.370909][T15736] CPU: 0 PID: 15736 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 638.379582][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.389637][T15736] Call Trace: [ 638.392948][T15736] dump_stack+0x1df/0x240 [ 638.397299][T15736] kmsan_report+0xf7/0x1e0 [ 638.401730][T15736] __msan_warning+0x58/0xa0 [ 638.406246][T15736] streebog_xlps+0x645/0x7c0 [ 638.410880][T15736] streebog_g+0x143/0xfd0 [ 638.415214][T15736] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 638.421292][T15736] ? update_stack_state+0xa18/0xb40 [ 638.426514][T15736] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 638.432711][T15736] streebog_update+0x127d/0x28e0 [ 638.438050][T15736] ? streebog_init+0x2f0/0x2f0 [ 638.442837][T15736] crypto_shash_update+0x4e9/0x550 [ 638.447964][T15736] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 638.454150][T15736] ? crypto_hash_walk_first+0x1fd/0x360 [ 638.459700][T15736] ? kmsan_get_metadata+0x4f/0x180 [ 638.464819][T15736] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 638.470634][T15736] shash_async_update+0x113/0x1d0 [ 638.475675][T15736] ? shash_async_init+0x1e0/0x1e0 [ 638.480729][T15736] hash_sendpage+0x8ef/0xdf0 [ 638.485344][T15736] ? hash_recvmsg+0xd30/0xd30 [ 638.490032][T15736] sock_sendpage+0x1e1/0x2c0 [ 638.494672][T15736] pipe_to_sendpage+0x38c/0x4c0 [ 638.499542][T15736] ? sock_fasync+0x250/0x250 [ 638.505117][T15736] __splice_from_pipe+0x565/0xf00 [ 638.510153][T15736] ? generic_splice_sendpage+0x2d0/0x2d0 [ 638.515839][T15736] generic_splice_sendpage+0x1d5/0x2d0 [ 638.521342][T15736] ? iter_file_splice_write+0x1800/0x1800 [ 638.527068][T15736] direct_splice_actor+0x1fd/0x580 [ 638.532199][T15736] ? kmsan_get_metadata+0x4f/0x180 [ 638.537327][T15736] splice_direct_to_actor+0x6b2/0xf50 [ 638.542708][T15736] ? do_splice_direct+0x580/0x580 [ 638.547773][T15736] do_splice_direct+0x342/0x580 [ 638.552656][T15736] do_sendfile+0x101b/0x1d40 [ 638.557309][T15736] __se_sys_sendfile64+0x2bb/0x360 [ 638.562431][T15736] ? kmsan_get_metadata+0x4f/0x180 [ 638.567564][T15736] __x64_sys_sendfile64+0x56/0x70 [ 638.573121][T15736] do_syscall_64+0xb0/0x150 [ 638.577651][T15736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.583544][T15736] RIP: 0033:0x45c1d9 [ 638.587429][T15736] Code: Bad RIP value. [ 638.591496][T15736] RSP: 002b:00007fdc82c06c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 638.599909][T15736] RAX: ffffffffffffffda RBX: 0000000000025a00 RCX: 000000000045c1d9 [ 638.607881][T15736] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 638.615855][T15736] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 638.623825][T15736] R10: 0000000000007ffe R11: 0000000000000246 R12: 000000000078bf0c [ 638.631808][T15736] R13: 0000000000c9fb6f R14: 00007fdc82c079c0 R15: 000000000078bf0c [ 638.639810][T15736] [ 638.642131][T15736] Uninit was stored to memory at: [ 638.648219][T15736] kmsan_internal_chain_origin+0xad/0x130 [ 638.653952][T15736] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 638.659947][T15736] kmsan_memcpy_metadata+0xb/0x10 [ 638.664969][T15736] __msan_memcpy+0x43/0x50 [ 638.669387][T15736] streebog_update+0x1240/0x28e0 [ 638.674322][T15736] crypto_shash_update+0x4e9/0x550 [ 638.679429][T15736] shash_async_update+0x113/0x1d0 [ 638.684455][T15736] hash_sendpage+0x8ef/0xdf0 [ 638.689051][T15736] sock_sendpage+0x1e1/0x2c0 [ 638.693642][T15736] pipe_to_sendpage+0x38c/0x4c0 [ 638.698497][T15736] __splice_from_pipe+0x565/0xf00 [ 638.703523][T15736] generic_splice_sendpage+0x1d5/0x2d0 [ 638.708989][T15736] direct_splice_actor+0x1fd/0x580 [ 638.714100][T15736] splice_direct_to_actor+0x6b2/0xf50 [ 638.719474][T15736] do_splice_direct+0x342/0x580 [ 638.724324][T15736] do_sendfile+0x101b/0x1d40 [ 638.728915][T15736] __se_sys_sendfile64+0x2bb/0x360 [ 638.734024][T15736] __x64_sys_sendfile64+0x56/0x70 [ 638.739051][T15736] do_syscall_64+0xb0/0x150 [ 638.743557][T15736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.749533][T15736] [ 638.751909][T15736] Uninit was created at: [ 638.756152][T15736] kmsan_save_stack_with_flags+0x3c/0x90 [ 638.761783][T15736] kmsan_alloc_page+0xb9/0x180 [ 638.766545][T15736] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 638.772088][T15736] alloc_pages_current+0x672/0x990 [ 638.777194][T15736] push_pipe+0x605/0xb70 [ 638.781443][T15736] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 638.787166][T15736] do_splice_to+0x4fc/0x14f0 [ 638.791756][T15736] splice_direct_to_actor+0x45c/0xf50 [ 638.797125][T15736] do_splice_direct+0x342/0x580 [ 638.801976][T15736] do_sendfile+0x101b/0x1d40 [ 638.806581][T15736] __se_sys_sendfile64+0x2bb/0x360 [ 638.811690][T15736] __x64_sys_sendfile64+0x56/0x70 [ 638.816888][T15736] do_syscall_64+0xb0/0x150 [ 638.821394][T15736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.827275][T15736] ===================================================== [ 638.834199][T15736] Disabling lock debugging due to kernel taint [ 638.840353][T15736] Kernel panic - not syncing: panic_on_warn set ... [ 638.846949][T15736] CPU: 0 PID: 15736 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 638.857003][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.867053][T15736] Call Trace: [ 638.870355][T15736] dump_stack+0x1df/0x240 [ 638.874698][T15736] panic+0x3d5/0xc3e [ 638.878644][T15736] kmsan_report+0x1df/0x1e0 [ 638.883159][T15736] __msan_warning+0x58/0xa0 [ 638.887669][T15736] streebog_xlps+0x645/0x7c0 [ 638.892312][T15736] streebog_g+0x143/0xfd0 [ 638.896659][T15736] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 638.902730][T15736] ? update_stack_state+0xa18/0xb40 [ 638.908473][T15736] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 638.914662][T15736] streebog_update+0x127d/0x28e0 [ 638.919648][T15736] ? streebog_init+0x2f0/0x2f0 [ 638.924418][T15736] crypto_shash_update+0x4e9/0x550 [ 638.929535][T15736] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 638.935718][T15736] ? crypto_hash_walk_first+0x1fd/0x360 [ 638.941271][T15736] ? kmsan_get_metadata+0x4f/0x180 [ 638.946394][T15736] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 638.952207][T15736] shash_async_update+0x113/0x1d0 [ 638.957247][T15736] ? shash_async_init+0x1e0/0x1e0 [ 638.962272][T15736] hash_sendpage+0x8ef/0xdf0 [ 638.966877][T15736] ? hash_recvmsg+0xd30/0xd30 [ 638.971561][T15736] sock_sendpage+0x1e1/0x2c0 [ 638.976186][T15736] pipe_to_sendpage+0x38c/0x4c0 [ 638.981051][T15736] ? sock_fasync+0x250/0x250 [ 638.985667][T15736] __splice_from_pipe+0x565/0xf00 [ 638.990701][T15736] ? generic_splice_sendpage+0x2d0/0x2d0 [ 638.996369][T15736] generic_splice_sendpage+0x1d5/0x2d0 [ 639.001858][T15736] ? iter_file_splice_write+0x1800/0x1800 [ 639.007585][T15736] direct_splice_actor+0x1fd/0x580 [ 639.012719][T15736] ? kmsan_get_metadata+0x4f/0x180 [ 639.017848][T15736] splice_direct_to_actor+0x6b2/0xf50 [ 639.023228][T15736] ? do_splice_direct+0x580/0x580 [ 639.028294][T15736] do_splice_direct+0x342/0x580 [ 639.033179][T15736] do_sendfile+0x101b/0x1d40 [ 639.037815][T15736] __se_sys_sendfile64+0x2bb/0x360 [ 639.042932][T15736] ? kmsan_get_metadata+0x4f/0x180 [ 639.048059][T15736] __x64_sys_sendfile64+0x56/0x70 [ 639.055004][T15736] do_syscall_64+0xb0/0x150 [ 639.059520][T15736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 639.065432][T15736] RIP: 0033:0x45c1d9 [ 639.069319][T15736] Code: Bad RIP value. [ 639.073380][T15736] RSP: 002b:00007fdc82c06c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 639.081813][T15736] RAX: ffffffffffffffda RBX: 0000000000025a00 RCX: 000000000045c1d9 [ 639.089783][T15736] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 639.097755][T15736] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 639.105726][T15736] R10: 0000000000007ffe R11: 0000000000000246 R12: 000000000078bf0c [ 639.113696][T15736] R13: 0000000000c9fb6f R14: 00007fdc82c079c0 R15: 000000000078bf0c [ 639.122778][T15736] Kernel Offset: 0x12600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 639.134424][T15736] Rebooting in 86400 seconds..