aa:aa:aa:3d) already exists on: batadv_slave_0 [ 454.307782][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.317856][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 454.328476][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.342860][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.351990][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.361396][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 454.370659][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.380632][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.411967][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 454.422827][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.433253][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 454.443931][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.457550][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.466902][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.476736][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:51:39 executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902810003010000000904000000010100000a24010000000201020b2406000002000000000008240700000000320904010000010200000904010101014200000905010000000000000725010000000009040200000102000009040201010102000007240100001c0008240201000000000905820910"], 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/4096, 0x1000, 0x2, 0x9, 0x0, 0x1000, 0x101}}, 0x120) 20:51:39 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/207) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x410002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/partitions\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x140, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000240)=0x4, 0x4) 20:51:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000034c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000100)={0x0, 0x81000000, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="0100000000fd00000000420000e43e0000006e657464657673696d000a0010"], 0xb8}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xc8, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) [ 455.086998][ T9588] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 455.095580][ T9588] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 455.289979][ T9075] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 455.461388][ T8712] Bluetooth: hci2: command 0x040f tx timeout [ 455.497681][ T9588] team0: Device veth0_macvtap failed to register rx_handler [ 455.530252][ T9075] usb 2-1: Using ep0 maxpacket: 32 [ 455.662601][ T9075] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.673032][ T9075] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 455.682274][ T9075] usb 2-1: config 1 has no interface number 1 [ 455.688555][ T9075] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 455.702981][ T9075] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 20:51:40 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000000c0)=""/24) shmctl$IPC_RMID(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffffffb}, {0x4d, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) [ 455.942586][ T9075] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.951923][ T9075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.952029][ T9075] usb 2-1: Product: syz [ 455.952130][ T9075] usb 2-1: Manufacturer: syz [ 455.952254][ T9075] usb 2-1: SerialNumber: syz 20:51:40 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x3, {0xffffffff, 0x5, 0x80000000, 0xffffffff}}) open(0x0, 0x0, 0x0) [ 456.390669][ T9075] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 456.398756][ T9075] usb 2-1: 2:1 : unsupported format bits 0x10000000 [ 456.466905][ T9075] usb 2-1: USB disconnect, device number 8 20:51:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x20806ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x9e, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x24040000) tkill(r6, 0x13) wait4(r6, &(0x7f0000000100), 0x2, &(0x7f0000000140)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f40700090400020000000100000000000000080001", 0x1f) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1}) splice(r0, 0x0, r7, 0x0, 0xac95, 0x0) open(0x0, 0x0, 0x0) 20:51:41 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006f00)={&(0x7f0000006d80)=@xdp, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006e00)=""/155, 0x24}], 0x1, 0xffffffffffffffff, 0x5c}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0x800, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(r3, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x88000, 0x108) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x79, 0x4) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x123}], 0x1000000000000158) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) [ 457.119989][ T9075] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 457.381686][ T9075] usb 2-1: Using ep0 maxpacket: 32 [ 457.510793][ T9075] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.521354][ T9075] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 457.530647][ T9075] usb 2-1: config 1 has no interface number 1 [ 457.536905][ T9075] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 457.549922][ T9075] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.561375][ T8712] Bluetooth: hci2: command 0x0419 tx timeout 20:51:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000480)={{r0}, "c191644047084ad1c373e7abd67d632ef257e5515333e0d4eef0f2cc4cbf44d58a00d52e70c948f2adb3f50f41336dde9e36f26e147e2b49a906fe98d76514d548f960f86de487baad6a2693d1c84135c8ccde6af50bca09e218d63fe7ed522933a56ad4e642fa02f7b92a23dff28c6e4b9dd9a417539fea6030d01f00fe5fb72c87806d6c2ab488d48ac2a79555ef6ed6a693f4213e9dc6328b597d9afd079c762a9ec5daff955019420b2954801a2f932dcacb0c50f7bfb9f348dca52430c6434fefe7cfe381b67df4c2b4332243c005c15c9a56f1d1d3a580a33b1092007b7bf107da078769c8dc8825989ff11cab56ba43987732d08cf04a791bc7a12f8d494629e1876603924581d086c7788ca87c744a8ba04541869d4eea9fc6b97278643aa49623f619b36396023e6590152d63d7375ea448290e5d19290ecd69642e8fc61e1321defb8511251a01cab2e7d00b106db5f82ea36f1e19ef9a530aeb63709fa74d6d5a584d7732f07d12535eff404371be965cba2dd68e22c633d06906913ad8e7922be4931408bfcf2ad5423e74795566f2609976c4ae9677487d9c7969cd998ac993cda63d52d9215509065bac37890bb52fc385199d06be8c85d86fe2481e0f689401e448c96a50552c6679af8b17e12330a4a898e0cdf65e956b0825503287114aff34550ddb14b1fb917e4b7b5f340f30be0332c0ca81b8b1a85d9a7eb89b66dfa28ace5785b52668c1344d4109f7cc57a068874a439357372302f6179a11df5bbdc489d1da29732ca9e7fb27d34f3ce8cbf5d059c5435e6ef0a00dac04f7cc2e17f7a72499754931bba6cee7bbbe0f310561cc579b77d5200ea8627050b4be43ff66e306c5c518b638ddba55f1fb814d2e463d6afe3c3c5728e9ff1672e287df4f67e1cc9d63faa1ae073d83a9ec66be748d9912a097353fab8a38d471c24b7a1b46e1ea42683f89b3644548388f95939db0bf1391c10fa7323a00160b704db032bb3e43c1e6b118f4230cbced3563077f621419e86b4eb5e3920030f9830bd8b978335a87624b4d0442afb84453c5af1032bfaf8b7612b89808a8e9413933a481d8463ee91f02d2e13c8b654ac5eb5d9f5c7e16332ad9562f04843d28d8da4d0e1e5d49fe77b59bf728c352b1f002b12e63442d0deabb73a724d80201dad6a5b1a87df5f164347b19475a50457b2a9dba0841203f611679bf05ecf8c9432412c44be39cdd62ef61c98a1dacfbf1faffca9db4cda58b7e8b2f9d185eec14f19b0192dc40a964cd52848bc13674162bb1edad800ada6bcc5ecf3ece5b97cacb614486b2b3136a4a1c0fb69ba68a6af1eee93960d08595732aec2404ed96a5e9ede115e2b090a3146ea6727d72d4a2cd08de0849600af4b61a1f855ee5a37f60479a936ad4e8134091f4580c5697ebe3a44f7e27cad1cfe0e7c66d0f49430de793564d8499d0e07f1913443f32f5f669f6299a764cfd75a5da42c384a975b25aed41e725e966885640d0de909b1e4c097ef5a6fe2a3f5c0c21a31c79f6d9c23a02e584712042bee64df1f3a03837100b95a9e4684877aa15ddd8b4c513ecab5bcd28885fc7d666c9d8ad0d46f5ef959ac47a4b95262f359a1264bfa1b7bedb4cb8c3546f8ff719b728722ac5ebad29fcbc90d1eba18307d2bef29238c52e404442a994d21a7f239c88049e258919a6fbd1c310dd4e2ae88b59c57226ec5a48aef154cd4025969e4cab08a77af5e818f218341e7fe0eccdfb3c57a588ef545c811d6fbfd4e7c4049664225c0807d2093ed5d534a50a6c1d52ec1b2d2c7e18e265feeb30686a331159944c0cb648d8d9a184431561165ae087b153145b4ba343a79cb167de3732ae8e99fe4f7f71ded8bad95056000d54b53e3ad3d00f891f2a24c2f72901868d8baa106353d5bd4a9f714b35a433fc9655777e559adde1726ab58c6def235167797df619631910d8d808fa29a79f92f1b0bdf8dd324a6ececae2a8e3d894939ee5d0923b271153a8c18c7b1b08817c79b28c5f4c4b2dc7c684ceae640ec7dd06b782ec054ce27d4158deff4aeab5127b969c5c8ef197eecc3eb9bf1ca6adbbb11a4a54e4e21e22dd5547788e099ae6b0152a7b4921056709d9b3f4aa105f2944b91f80c818dcfc05800d6fcaf0caaf52916265a3f0b89fd19d6b825b88e7b975b73962a2b7d3b7e80ad04f384b01eeffa63c46b850fa4cedc2c7829a26c5f2ba6f4f2e24d1862fee704b85a4fac8e82ce9c9ae1e5c3523f13e20556cba2be82195463292df26a67402ce73401ff4d3566e73717e739c19cb3233c799ba3e04dd156e8ac395cdd2d8dc61de26e43c20c70c54c0ba9d0c8ec233c649e14e90051b48f08dd76dce68bad849d84fe102d4f0aa0774afb41eeb15e2c372ff8d28c43b60ff7e52ed8364d8d11a7893cc563e881b945ba0cb60cf289c260688aab18b78456f4a69d4e787846703330bb1cdddf14b2dae14859adcfe2a0d0bccfd9891ff683d9ca50e0db390069544c596b2e2301778121200de0a3d4ac2b6049c0b4ad3ef1a6704c879d246cd6e2f9238d612a10110ffd4c9a32e0096fb251c7970988c4b5245ed3345e264e0dafba11906b2bfb5aca6d4adc0db8b6f8ebb4578e28cecc24eeb0b2763072d2f14f68912c598057481625fbe5d3f88da01baa3a98927e4af02c07e35bb75f26cb776ddfad098e565c7c29f1ee0701580781246041b6fcf56a5520f3a0feb677d0c16a0e25ce4bb5982c45de6f6ed92de9b400250688f609abb6ac88472688b872ef9173389be1ab2de55192fcff6ce8d5d8767b61ebdb80512aebfbadb38a731964fad273ca33c353e4c7db342b6516610e60ca0456bc3c1dd68d626d9429d8aa529144e7a12448bc78ae8d3d6d3375eb4fa528c73b89ab3037d5ff57d20631b490da1b9ae86e16f4ba8589bb74610ff8d8bd640f3872cec55f4e2f3eb8183480f892eb75f21adb6c79b66f29a4ebb18d4840b00424b6bdf3674bfb0aac65b99df59ab0f27341e4f28f1dbc3c735a599b16f7e71cb3b4f3fd623193376464959293a05a59888cd21f5bb107882a938baef519da3ed8a083493ec93254ecee161051c0d0fed48589804c4ae455e002a88d379d1cbca7d79028c14a3848c6bf06151db5ff623bffdd40b3ade649e3d9bbe4ec8b3553866d4883da2eae602a8d22f6b846ba4d7e5c90cc5cd4ccc489e6b6e7b789e3d2d58ec2cc215ba4b1cfc8e9a3f5fc80e753616ca368c1df511ee2561fda5b63c12b572440a1a776c37aea551d648c7a8cbfbd42f0fa448bfc4a6bd8922d1b7534527cc50bab57c3f223bad1333983da31de4d2599a6a7a7cd0e9ab9153db87c7495e89ea536daa73a52a55515c9a1abee37362e4f248749ebbe7101e50e3f5b65afa2438b62cb955960d0314c844a854836d3c603fabedbd6176dd447f46b3763d25d42066e3ee555ae78912b5916ba355ad40b4db67995301d93e701c4b95ef9cd90ba6840feb124c8b303e7e5c8b9663d0f2fa65ecd301c41546f11bf585e91d086e0094897099da91aa52352cc384ee1ecb9c4bdcc0ca5718284b42b2898713a63b6f5ed5075bb8b01b78841b5afa22e8b26ff020fbb138afdb29db41b0309ed6d0d235fe11905d9d75545b14d940fb2c68519a234a4762063b03d93efee5668301e7ddcf5e23f86cd754d9d0f8f4f6815c0a9d3868bff574a2bdfa3f39820fe1a6b0c2719053be6e7451ba682902d98ee951743b408047dd890a4caf268e777d276661513ef2bf1e035a2cf29da43d3b6a6fe10fc8719ba70d909f9f859bdcb0599155219ed83ee4beecceaefe1297eadb9cbcccd589a416ff5e97c191aeefc18c76289b18431a5c731ec9c75abd24ba29339760d3b348f124e2adfccd57d2b310c81e7e1f4a480d6e702c219b1d72eb2964bba401f242134b99a3d2cfb00ff6525f88de020e9939792e6750c176d06c3f40330d1a655ce238eef155e725789beb3f8494a5881d28112d053b37d4ef9caadc0d1363b0cdf85cc41c0e6911a7d0b5a5f4840a4def3536a78845e3d5cb3090c6b4299ca6c164da52cc770e264ce3ae1e1f588385bb840fe11dc24eaeb825abdd3de066a242e4cf71f671a43cb74cd3f46beca8772fed2e60521357f28a4bac360aa91103997ca8262be445e3cb098b25245d4febad49ba4029dc42a380ae09f4fccf9d6fc2e97612c85675477021d52f0966407bb3fa675cf8b27f752151a57fbf9d3ad32b2b7bc401bf7eb4b848f3e06051b56ac14b05ed27555151c40e134f740b3c81c02552edb6df97d842460c9048aafa5cd9cc26002a0e76245d50aa2ec6213203e8d8aa9679fd405e50db13c3501f1f67f18d20b74b7dec4bf66a96502b5796699d631a2d238a2455dc5e9c3f667dad3e41774b92f0df935730736c0082b44f62651880785a11cdf77c079fef9cbc845457dddc5f6e2772300fff529f3f1b0abc3597adea22cdf3ec8489f8e1db4f70c43fb8382a85d0b2a069209e6d18b6330a7d6af0079f51f8be768b338a0668cd097070d082f624d83c652814295d8d1c455f4f07b580625f5284275fcc658c235cdd373b317af2584fd55a724a6b49e788583d04b40b1f41f7f249b706d0fd90f9f22f85a7b69f63bcf023b8d4ef28c35111cedca58dacf12d011e9f687113e47a667f12219cb4f12ec31ee2c85d1d339f72d92abdc1bcbc65e5eac6d3c9de654c605cf6735ed4ba6518790eab2424d26858166fceb319d5befe0633b5cf4ba2de770cd3464ebea8964006c358e46870ef518c11ee64c08fa34d82d2f4df84c3e89cdf46e8c91b889d64bb47d3fcb722e13690ccceb5554ceaccfa3ed634e4a427e546c4b22559a1e2882f6605f43fff3dbd9c7d5439eee259711fc692f12203233fb311784d8226c4ee0652e7b3a20f8f6d4ac39df9044b251f13473382e113d8c96e302477ce10187830049caccb2f6640ada831a21f2f109ba94ede3613c01675879d57c76311cb439f7fc2b0e10029769a55b18bfb822fc57c48dd313f13709bcc0f0582d05072dc0b129c380f82a764dc92da7711fc624f984dec2f9d99e799da3522704131deb78b69867003b19078db20f832dc8973ae0b5a6ffdd98e93b35e049724056a99cc1256a7c10bcc6304c9fa8a26e597eadd4c960b02dfc449bb778c3cfcdbe5edf3f8b099161188acc14675c0e50a7ad978777f98f21c1e136e5747184ba1a04255634b692eca4d418bff73e83d4aae7d41246ecc82a17d40b5082e6e33cd4612ccde2048464185683bc02c6b8a1a79a2cb8ef5efa438f6666d4aaa31c46c355a2472b3864f8c9d4870765953f16aba95a17011e0eb1d8f6e1e79d82e0155c09830391666946a1e3e81658f3ca8c02187577629852a7deb7099461d4cd56437e758daa5a66b4e8473bfa2818f68e122d4993bd778285c6b5fde9f0d0ccdcf61d2bdc1e3b9351726f1249e8e4141b23824276f913a8300fda4c0fd82d6979698799666df4a97c02b9f618f03914315326cb86c7bc8baa58532e216ea963f18145b09c015f329367e3722e6354ef8b941cad7bacb7a777b5ee809b7b9d395a07092538723a3bdc484762add25fb3120609f4988181ab5d0a9c44e5e46c2a6e5e0ef84057c5234f291cfccc7f6932ec37094949fd2ffcd0a29214882a8f68713b7dd5e1361f1a6c6192df639185f87115701556348e86bf3b3828f35297fad924d43c407750520ea5b4c0b9bcd111de3ae31b8f6cb0889978e5ef292dedcbfce8410"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000e, 0x10, 0xffffffffffffffff, 0x8000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a800160040000100e5580000000002000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48100000000000000d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215ce3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, 0x0, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="09103a20", @ANYRES16, @ANYBLOB="01002dbd7000fedbdf250c000000050038000100000008003a000100000005002900010000000500330001000000050037000100000008000b000600000008003c0000100000080034008000000005003500000000000800340002000000"], 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c03cd2272c5e"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe65a}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4050) [ 457.861598][ T9075] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.870884][ T9075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.879019][ T9075] usb 2-1: Product: syz [ 457.882221][ T9641] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.883741][ T9075] usb 2-1: Manufacturer: syz [ 457.897547][ T9075] usb 2-1: SerialNumber: syz 20:51:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x161000, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x6) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000001c0)=r0, 0x1) keyctl$setperm(0x5, r2, 0x0) keyctl$KEYCTL_MOVE(0x6, r2, 0xfffffffffffffffc, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000100)='/dev/sequencer2\x00', &(0x7f0000000140)) 20:51:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700000000000000000000000050c63a0aff0b2f520e35ff23a47bb2e9d44a49e108d42bf1784c7a6816d4927c68ab9d89403e791a888359622c300092ece8f26a777d4dfe4a4f321230c077bdc45697171d91b34c8dab3a77678f7107fc040bc4af577237d1e7d61b676dceb56b041503c21e6b18f1e7c2ceb1", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000000)=0x7fffffff, 0x4) sendmmsg$inet6(r3, &(0x7f0000001840)=[{{&(0x7f0000000100)={0xa, 0x4621, 0x0, @mcast2={0xff, 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$get_persistent(0x3, r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private1, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x3b, r2, r4}, {0xfe20, 0x4, 0x823, 0x77e83849, 0x66c, 0x1ff, 0x1, 0x2}, {0x7, 0x8001, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2}, {{@in6=@private0, 0x4d3, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3502, 0x3, 0x3, 0xc2, 0x200, 0x7, 0x8001}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="69000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0x24000051) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 458.180274][ T9075] usb 2-1: can't set config #1, error -71 [ 458.191320][ T9075] usb 2-1: USB disconnect, device number 9 20:51:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000480)={{r0}, "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"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000e, 0x10, 0xffffffffffffffff, 0x8000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a800160040000100e5580000000002000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48100000000000000d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215ce3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, 0x0, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="09103a20", @ANYRES16, @ANYBLOB="01002dbd7000fedbdf250c000000050038000100000008003a000100000005002900010000000500330001000000050037000100000008000b000600000008003c0000100000080034008000000005003500000000000800340002000000"], 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c03cd2272c5e"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe65a}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4050) [ 458.440867][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 458.487632][ T9659] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 458.515993][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 20:51:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000080)="f1", 0x1, 0x10, &(0x7f0000000180)={0x2, 0x80, @rand_addr=0x7}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x40, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r2, &(0x7f0000000200)="59d6d993eaece0b731e291f7bf4dc7c176d1ebaf4ee740a47e27ab5c38e0f33b290751ad451c4658f053b0b32290a1dd5b3a668ef31e61746650479081157704e95216bf25e7311b37e6260902377a1d535813d16e9f670a14fd583415609040803a3167b42e2f9f8c7b67833c0f77f68e6f779f8d8f512407ce2b451c25bf054e329c9e11a002d8c284ab1248a6442b086f2c5be496976499f48ca3cb158b5ed31ccecdec", &(0x7f00000002c0)=""/124}, 0x20) shutdown(r1, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000cee2f7769b84a77f1996bc224eb6d7f746c5e686294d41cb97facd0d69e360bf23f7cee73f82af9b84978f582c5f0927893eed51895a5fa0cc7b2466402c383800d6f6ebcc9732158b2f9637e793c8d538ca", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001440)={r4}, &(0x7f0000001480)=0x10) signalfd4(r1, &(0x7f0000000040), 0x8, 0x800) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0xfffffe59) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r6}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 20:51:43 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb, 0x1, 'socket\x00'}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x51}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0xc004800) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)={0x100000000000000}) 20:51:43 executing program 0: open(0x0, 0x0, 0x0) [ 459.006872][ T9667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:51:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05000100000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x2}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="040022"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20:51:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x9}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) mlockall(0x9) open(0x0, 0x0, 0x0) [ 459.603420][ T9075] usb 3-1: new high-speed USB device number 2 using dummy_hcd 20:51:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000001280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xf7, 0xce, 0x7f, 0x46458128}, {0x40, 0x40, 0x4, 0x2}, {0x2, 0x3f, 0x2, 0x80000000}, {0x1, 0x9, 0x9, 0x8000}, {0x200, 0x5, 0x82, 0x4}, {0x26, 0x3f, 0x1, 0x9}]}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000001400)) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000000c0)=""/152, 0x98, 0x40, 0x0, 0x0) open(0x0, 0x1456c0, 0x1a5) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = signalfd(r1, &(0x7f00000001c0)={[0x6]}, 0x8) bind$phonet(r6, &(0x7f0000001240)={0x23, 0x1, 0x9b, 0x6}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000180)={0x8, 0x5, 0x2, 0xd5e7, 0x2, [0x0, 0x8, 0x1, 0x4]}) [ 459.981136][ T9075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.992460][ T9075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.002547][ T9075] usb 3-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 460.011826][ T9075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.142015][ T9075] usb 3-1: config 0 descriptor?? 20:51:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r6, r5, 0x0) getdents(r5, &(0x7f0000000240)=""/4096, 0x1000) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x1000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20000920) r7 = perf_event_open$cgroup(&(0x7f0000001240)={0x2, 0x70, 0x0, 0xf9, 0x8, 0x9, 0x0, 0x6, 0x25604, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x4, @perf_bp, 0x424, 0xfffffffffffffffd, 0x401, 0x9, 0x9, 0x84, 0x88}, r0, 0xf, r2, 0x41b231f701e45597) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000001300)={{r7}, 0x5, &(0x7f0000000180)=[0x7ff, 0xfffffffffffff786, 0x9, 0x3, 0x7fffffff], 0x1, 0x1, [0x8, 0x3, 0x2, 0x92]}) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000001440)=ANY=[@ANYBLOB="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"]) open(0x0, 0x0, 0x0) 20:51:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000440)="767084e568d259edeef8ec8e6622f64e9f56f5c2df7128ccacfb08277911443be41fdb06499312f2004fcf3d4ed6157fc0a1d13ddaad41cac67f927fc53011cf6df1430c6b510194fddc7bc3", 0x4c}], 0x1, 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x2, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x10040, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x3f, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, 0x7800, 0x40, 0xffffffff, 0x694a}}) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='$\x00\x00\x00!\x00\a', 0x7}], 0x1}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) [ 460.491006][ T9075] usbhid 3-1:0.0: can't add hid device: -71 [ 460.497425][ T9075] usbhid: probe of 3-1:0.0 failed with error -71 [ 460.543243][ T9075] usb 3-1: USB disconnect, device number 2 [ 461.011015][ T9075] usb 3-1: new high-speed USB device number 3 using dummy_hcd 20:51:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x8, 0x0, 0x8f}, {0x50}, {0x2, 0x0, 0x0, 0x50000}]}) open(0x0, 0x1, 0x0) 20:51:46 executing program 1: syz_usb_connect(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x49, 0x2c, 0x9c, 0x8, 0x12d1, 0xac26, 0x9f08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x5, 0x3f, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x400}}, {{0x9, 0x5, 0x85, 0x2, 0x20}}]}}]}}]}}, 0x0) [ 461.402597][ T9075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.413773][ T9075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.423899][ T9075] usb 3-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 461.433502][ T9075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.573719][ T9075] usb 3-1: config 0 descriptor?? 20:51:46 executing program 0: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x10, 0x0, "a0bf7289b7ac44d7b67e631a4d148a8cd0e4b52705405e12657ea7208755977926bf68702ae2d365c277c863a3d00c52c60d03a41c16adf0270b2d52ae89ddaf8c2df9bdc09fe147037bfe28cbd3976c"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000001240)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001280)=0x28) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000800}, 0x0) [ 462.047130][ T9075] wacom 0003:056A:0100.0002: unknown main item tag 0x0 [ 462.054450][ T9075] wacom 0003:056A:0100.0002: unknown main item tag 0x0 [ 462.062009][ T9075] wacom 0003:056A:0100.0002: unknown main item tag 0x0 [ 462.069142][ T9075] wacom 0003:056A:0100.0002: unknown main item tag 0x0 [ 462.076352][ T9075] wacom 0003:056A:0100.0002: unknown main item tag 0x0 [ 462.221503][ T9075] wacom 0003:056A:0100.0002: hidraw0: USB HID v0.00 Device [HID 056a:0100] on usb-dummy_hcd.2-1/input0 [ 462.289446][ T9075] usb 3-1: USB disconnect, device number 3 20:51:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20000000021) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) keyctl$revoke(0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r5, &(0x7f0000000240)=""/4096, 0x1000) sendto$inet6(r5, &(0x7f00000000c0)="1388f7429bd9167121d7bb9ac2312285b70c938aa6dd784bd3ecd569dd4f8ff4819f044e339c11314bafaf23a80ff683fd8c0e766a0873de5c9cba01a9d6ecaeeba5955726f1b3e6993677c01b6a2b79ad6b526ba2e0d9b588500f0e51412165506e7001cd3ac7aa9fdc63d144f9d8677a3b4a54ce1005be8d09cff6d0ae161035d6a2342c19b47a8fd8a061a6582a71428185c0aa6e5d12d5dac1c35cc9d072f1f3f1155e4e7f49b11b7e7b7863926f8feb13dc7cf777d65a982854c7db72d1dd0c8e385113bb58cd971051d58096aafc81c21d917b52f912a856efd6116a0d64ed7388170031139c8e1b2d", 0xec, 0x5, &(0x7f00000001c0)={0xa, 0x4e24, 0xf8, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000001240)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0xfffffffffffffed0) [ 462.548320][ T9731] x_tables: unsorted underflow at hook 2 [ 462.717664][ T9731] x_tables: unsorted underflow at hook 2 [ 462.746731][ T9731] syz-executor.1 (9731) used greatest stack depth: 4376 bytes left 20:51:47 executing program 1: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0x4cf, 0xe0f, 0x0, 0x1, 0xe, 0x3, 0x1f, 0x7ff, 0x200, 0x4, 0x3f, 0x3, 0x3ff, 0x4, 0x1a, 0x1c, {0x2621, 0x401}, 0x65, 0x5}}) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xf708}, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000200)) socket$inet(0x2b, 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) [ 463.029957][ T9075] usb 3-1: new high-speed USB device number 4 using dummy_hcd 20:51:47 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000180)=""/75) open(0x0, 0x0, 0x0) [ 463.182909][ C0] sd 0:0:1:0: [sg0] tag#7468 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 463.193631][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB: Test Unit Ready [ 463.200496][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.210391][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.220273][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.230210][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.240086][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.249951][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.259804][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.269587][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.279459][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.289331][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.299203][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.309733][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.319508][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[c0]: 00 00 00 00 00 00 00 00 [ 463.415050][ C0] sd 0:0:1:0: [sg0] tag#7469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 463.425756][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB: Test Unit Ready [ 463.432525][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.440097][ T9075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.442354][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.453334][ T9075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.462995][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.472843][ T9075] usb 3-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 463.482457][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.491643][ T9075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.501349][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.519089][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.528941][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.538803][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.548688][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.558538][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.568403][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.578261][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.588111][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f4c88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) setxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x80000000, 0x7fffffff}, {0x20, 0x401}]}, 0x14, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = dup2(r1, r0) ioctl$CHAR_RAW_RRPART(r4, 0x125f, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x3, 0x81, 0x9, 0xffffffff}, {0xffff, 0x3f, 0x1, 0x80000001}, {0xb0, 0x2, 0x40, 0x6a5f}, {0x0, 0x1, 0x81, 0x7}, {0x7, 0x3, 0x8, 0xfff}, {0x3, 0x5, 0x0, 0x80000001}, {0x0, 0x9, 0x40, 0xa73}, {0x7, 0x4, 0x8, 0x429}]}, 0x10) fallocate(r3, 0x10, 0xce, 0x3fda) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 463.878841][ C0] sd 0:0:1:0: [sg0] tag#7470 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 463.889688][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB: Test Unit Ready [ 463.896354][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.906230][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.916094][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.925980][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.935850][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.945722][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.955604][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.965486][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.975357][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.985201][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.995153][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.995287][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.995406][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[c0]: 00 00 00 00 00 00 00 00 [ 464.112085][ T9075] usb 3-1: config 0 descriptor?? [ 464.131585][ T9075] usb 3-1: can't set config #0, error -71 [ 464.134574][ T9075] usb 3-1: USB disconnect, device number 4 [ 464.234430][ T29] audit: type=1800 audit(1599771108.966:5): pid=9757 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15733 res=0 20:51:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x30040, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/253, 0xfd, 0x0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) open(0x0, 0x0, 0x0) [ 464.352127][ T29] audit: type=1800 audit(1599771109.086:6): pid=9752 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15735 res=0 20:51:49 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000180)=""/75) open(0x0, 0x0, 0x0) [ 464.419222][ C0] sd 0:0:1:0: [sg0] tag#7471 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.429888][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB: Test Unit Ready [ 464.436539][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.446458][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.456331][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.466191][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.476047][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.485897][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.495807][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.505704][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.516560][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.526479][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.536376][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.546289][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.556190][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[c0]: 00 00 00 00 00 00 00 00 [ 464.564162][ C0] sd 0:0:1:0: [sg0] tag#7472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.574848][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB: Test Unit Ready [ 464.581648][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.591573][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.601487][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f4c88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) setxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x80000000, 0x7fffffff}, {0x20, 0x401}]}, 0x14, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = dup2(r1, r0) ioctl$CHAR_RAW_RRPART(r4, 0x125f, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x3, 0x81, 0x9, 0xffffffff}, {0xffff, 0x3f, 0x1, 0x80000001}, {0xb0, 0x2, 0x40, 0x6a5f}, {0x0, 0x1, 0x81, 0x7}, {0x7, 0x3, 0x8, 0xfff}, {0x3, 0x5, 0x0, 0x80000001}, {0x0, 0x9, 0x40, 0xa73}, {0x7, 0x4, 0x8, 0x429}]}, 0x10) fallocate(r3, 0x10, 0xce, 0x3fda) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 464.611396][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.621302][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.631199][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.641093][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.651024][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.660898][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.670786][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.680672][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.690575][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.700475][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[c0]: 00 00 00 00 00 00 00 00 [ 464.708306][ C0] sd 0:0:1:0: [sg0] tag#7473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.718997][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB: Test Unit Ready [ 464.725782][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.736070][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.745943][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.755819][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.765796][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.775672][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.785562][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.795410][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.805264][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.815129][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.825001][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.834866][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.844764][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[c0]: 00 00 00 00 00 00 00 00 [ 464.852655][ C0] sd 0:0:1:0: [sg0] tag#7430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.863300][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB: Test Unit Ready [ 464.870031][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.879897][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.889776][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.899566][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.909414][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.919295][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.929169][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.939046][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.948912][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.958774][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.968632][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.978485][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.988336][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[c0]: 00 00 00 00 00 00 00 00 [ 465.154063][ C0] sd 0:0:1:0: [sg0] tag#7433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 465.165010][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB: Test Unit Ready [ 465.171930][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.181815][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.191722][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.201658][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.211570][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.221448][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.231318][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.241200][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.251073][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.260947][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.270811][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.280660][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.290498][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[c0]: 00 00 00 00 00 00 00 00 [ 465.295943][ C1] sd 0:0:1:0: [sg0] tag#7434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 465.308655][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB: Test Unit Ready [ 465.315582][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.325493][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.335366][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.345274][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.355181][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.365096][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.375406][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.385314][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.385441][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.385568][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.385690][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.385822][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.385947][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[c0]: 00 00 00 00 00 00 00 00 [ 465.442172][ T29] audit: type=1800 audit(1599771110.166:7): pid=9767 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15733 res=0 [ 465.656596][ C1] sd 0:0:1:0: [sg0] tag#7435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 465.656719][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB: Test Unit Ready [ 465.656840][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.656969][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.657082][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.657209][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.657393][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.749068][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.759000][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.768856][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.778712][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.788561][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.798391][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x100, 0x9, 0x0, 0x1f}, {0x0, 0x4, 0x8, 0x7}, {0x0, 0x5e, 0x7, 0x8}, {0xfa, 0x1f, 0x7f, 0x5}, {0x4, 0x6, 0x40}, {0x6, 0x6, 0x2, 0xffffffff}, {0x8, 0x6, 0x3f, 0x2}, {0x5, 0x2, 0xff, 0x401}]}) [ 465.808212][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.818100][ C1] sd 0:0:1:0: [sg0] tag#7435 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:50 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000180)=""/75) open(0x0, 0x0, 0x0) 20:51:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) open(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = getegid() r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002840)='/dev/video0\x00', 0x2, 0x0) lseek(r3, 0x3f, 0x2) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x4000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffb}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x32, 0x32, 0x37, 0x64, 0x3, 0x64, 0x36], 0x2d, [0x66, 0x0, 0x63, 0x36], 0x2d, [0x38, 0x62, 0x64, 0x36], 0x2d, [0x61, 0x66, 0x32, 0x66], 0x2d, [0x64, 0x64, 0x36, 0x32, 0x39, 0x38, 0x38, 0x62]}}}]}}) [ 466.426311][ T9779] fuse: Bad value for 'user_id' [ 466.496650][ T9782] fuse: Bad value for 'user_id' 20:51:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f4c88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) setxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x80000000, 0x7fffffff}, {0x20, 0x401}]}, 0x14, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = dup2(r1, r0) ioctl$CHAR_RAW_RRPART(r4, 0x125f, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x3, 0x81, 0x9, 0xffffffff}, {0xffff, 0x3f, 0x1, 0x80000001}, {0xb0, 0x2, 0x40, 0x6a5f}, {0x0, 0x1, 0x81, 0x7}, {0x7, 0x3, 0x8, 0xfff}, {0x3, 0x5, 0x0, 0x80000001}, {0x0, 0x9, 0x40, 0xa73}, {0x7, 0x4, 0x8, 0x429}]}, 0x10) fallocate(r3, 0x10, 0xce, 0x3fda) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 20:51:51 executing program 0: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000010c0)='/dev/vcsa#\x00', 0x40, 0x668500) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000001100)=0x5) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000000c0)={{}, "4c5be5d51c2971df9216985f7b3acb6b738f653d3dbdf55c6c4f0ecf4b52b4820f7f020b21e9e6168426d4591657f43baef35198374ee86c8c75e0384e662885df30f7b68525f6b9e084e88bae0ff288636dbe50dfa562f920f544b8925a62fe1e907e6e3b72dac7f3f235de9e6787e6da78f3bd3cd802cef5eb7d252808108975637980765172c93e1bbdd4cb4c94218203604fbc389b7dc6bb102cbff7c0fe3f1f87126685b9016d106b1af253a1d16e8e4f59373a0d0ed3a884b7ba426d65281f05cbe5639f0d736c6301fc0977ec052c463a7ef5c82ea3e08844f3dfd0a30f8136b1830d28c5fbbe15ee5205b9f3cc36cea5aef5ca7bbcee7fe4a46891b2580197b83f9b295fa1d9006cf949914300cab557cd76faad15bd8ae525df503278f63ab4e6257d761f5be0b648b5f00705eb713b6d076886747669d6fe3e9947015395582b0bf95d6adc50327a97895f811a430e74951c8fb70f854d9ac8ddd569412334c7bb0771ae6eaac57e91443e10094e4427e5d0db7fdcecb04af23291943f344f1375a1e0bd1f132246470d515688f615c405f03434fce5a1eac5bcb09cce613eb7880b91c2f624881b53ee5fdb5380e4088e4d3074dce8ee5768214a06e945a86fec2935e9763ecf730407893d83c3c81f770a59afefa7418a7b95687c076d79161de84ea4e19476ad1e830558f5301d9a56bab4c31cbe57d046805ba8e6293549b87fdd6020a67fe0935e60e80ecd6bb486ae28ac3538b2c860e96789f7da3208a21406c3190020c00306b1725f1aa9c5159f652c765ec12e9f6c4189fe1ac3e975e1449db52138c837324e267a530d929a9989207a27d33f03a4d6bb67f06037e574aea64f6e008865345065cf7e61f2bd1774c1bd3df517321454bd1315702e0efc5501543603083e2ee184e5d86b9dfce22e559d5862896ecded824e3e7c3ababed1b91c8894b1dd4d1f1d5b1e41e319822c8606afb6e37e510def59c1bc56e3554023aabb8655de4ffcc3faa7818072ba1e21679c66d7848d7dedb603391a924049756cc4728d1f9c176bdc562ab1b29bae0ab40d546d6e1dc325df0796a2545827c42e36b1aa7118efeaf73f607056c75385e5d861c14df8867fedd9b3ce54942294103734bc404def94d0315828d1d1b8e74c5ef30091a71533a8119eb6eedb9a244264b1c6e792387857a3c9b8b3f19e331d9ac5a159ea8a4fbe3292a9bbfa3b6221e6201cd147a4a071bebdd732938a6b303494e0d897ad479f846487703437cfa27386ab083a1a3f2e4e8277969470cb6b2a3441a1863034193e0376975a4d0aa6d0d3f913cd4e08c65cb211574a76e03f6a225d8eb2b760418fe6fdeb8b309a31cc2d4827bc62163e9ee9a127bed51d0f5a0579876fe43cf749bbf72252783e358ae2aee5d6e405e4ccc83e0ac675455b0eae3849d039e6cd1b0db2bd435da52e3d29a75ccdf916a6c31025ef85cc04ac1d8e1accbc1ed82fa0af4c998cb0cac4b44b65c9d7350a43b6f92bd9ad43123c51c2b052a8c9f702494876102075997bc30b118496ff0a64c6acf570a29eb7e39935f846433b1ea18ded82389152bfda9c7a58ffbad2981d29e71957e4a7719ad4af810639d09b7ba3c760eb3857a46b51f597e68a090d6248497927d561ad2e63a225174ac3185af238f859db3126eca3f36c74f0adaa8727d09e10207ac732790fd79de989b6f92693988505f0c64f3ff28792de1887dfa382a4155f4cedd827e4605d7b79752bafccf79e7cc02953126344a868f4c91463e7b7da51a716969713517bd2583243600683fddc8092ceefbf8c8669ee94040ffe2734eaca6454e520a7f969bd53d8621af37a30a877bf33726c69c87f187fb1212107b7ad17662a8cd0f346c5eb0d7cd08b6c2222b0d6aedfe24c6a14a64d2cfbfa11bf2b2aa7d031792f48bbde11fa68014d9866cdee9444a610352d335e02fe44498b1637973b5ec8508539c072d1f83bad7a79b7a9cf91efcef5cea1cdd3cb9932a320a4025e52863efbbdb21f01ff3754c1faa312df2989b850c21bbc23aaece9f70e4ec1b2454d56fe406bdc1ad08c984c829cae5395e11e428afa75b7fdc52c107121fae320ca1e3f25b70b432af2d84c2fef615ed2ec9a77bba8c4ae26638b0f482b54885404cbd89d0d0818d97e11285c4de66a91271ecada1e8ef6725dce73bcbffcf04d4d3e3eca2f24ea0ceab26584fb31822e48635b7ffbf1c10442b2504db8d2c5adfadc4d0477623aa944737ff5e2a249d971a6d74ca9b7d6bbdb52e1687ebe85e628b28650e1c15bdeb93e6f645a68d0778d47285e61a1222058871a9c13ea7caf10632e0e5dd30d4f97d0fa56dbece3a128a0858f7d766bfcd2e9f08cb5086b7fe39898edd0ea154adcb9a83d9c670e70d61d3e062178cbf670daf379dd3d47d770cdf46f63a8a9a6e27e3cb6e8eb3b0a440729965d95c43327703fbd1d705dd49b1aeedd059d3c17e9fe84b4dd73f07b0655284c880055bd51c839f95d520384ea365e8f169afda67f3ebc3635cf48f5c8f478822434d8b6ea9e8cef8ec6f6412f10a780d344228ff763bf390cffef78e02c57c5a9d2a68e2149ff535d2215e28bc4ddd1abaabeb8a2bf727aa1cb350a5562d01719da49f283951b958c79b69a5444fe0a9009be59b9b7d273366d7d116d92a01b54f0c08213a308d3b93f897871f6047b37c3bc159a8830915c475de818d8e2478e0ef42f564f7d11bc0579b3946f65719df946f768f40ca06264e84ecc4dac3e3afce6105b9be4d3e46c98879f1ed81c171ce0cd430840c1677281eee7a6fb27ce65a7edef6d94734d244a045aca41e9092f8effe1a2eaf666ec014da391e990aad868d54a8d1f29b63cc576ba0112da6c89ff8d1113c2dd0c3c7c8d3d3bf9794b3a45e990774c0bf7e714954bc734e35f3f05644f3621289ee25bd75f719ba2f58a42e8bc07d5e134ef1fb9971f520ed1ecfd99676d79eeb4bcf5017d038086955ad12143b2089ece2a2039d52d00de1f31b4c803acf1687cf70addb91f1e1c99867b1c272d73927027bbcb50ab5cd03f3ffdaa35792804043b6ed1dbcd75006df8c8fec7ead6e86321f457c566dd5aa9c9b739a2d64560b406deea596cbb0e2973b521494a5d8a5fe74b1000539e8eff96db9f4eca003e3bb4e425cfc87d3abe3a3c39545da454abe321915116b458fadbb53ebee9c3706030c572a4e05abe5f752b60e9d12ea0ffd26ce4e63b7eb97ac022448ff3cabb90c4ad9c93f8073452377f6f67058ca01b5314ed5a31ab5c22f5e02767cc2d35f732f2599c755d927923722dd58ef43e98fbb6f7f24e4ea03f32a22ce741bcb254256b250ec06cda0e26a94e61a167d640b740e038db9296209300515fffe83d6e171fe82e4daf2413f8e89e668f9c802f72393aee61a0f161bc167380e76780915fa09bf7a77005a2e6ce1ef434cc8527191df996b99e21ab2bb06abe3a6578b4992b49ba957df734f3bb3bcebd6cd2da6aa1332f57764b18e7cd6ed81cbd94f8dcf8b8a2a16ef27fc019ef42579eb97ec42d551bd343b4fe7a4fd7c185ef009b09cc3a6a345e4366ef0a0b8e3cfb8075d9e459e10952f7b7a66c9455f5729104e82139329279b9b660d07ee073c6ae28284c4dbb6c141f513305c377a8c6f4129c42fb93555879c2c9e3cf95fc407b5941364d23dd5e67c1072354cfc0855b2b99495a88dbdef979a808ecb9076a72ee1a9b2527219ad8630eb4bb62247f7412bd457e1c3154ded0657c91c8ac0bdf2583ac6baf63310f64185d37d588b73a628b4999ab8903967ca4a5d27b55c89b6fb11838bb49b542f29f7f368c6d2281411c1b9bfd163f347b7c4cf31cc6d833a2d4d20077ba749d28e9bbbee7c026e8cae5475a534d7410d29404f59c4cae2dbcb3a84863ff71ae327c6a4e686b5ba2f4ec96082291d4b0acc67916c2986e5221906091a0488e080c1d28ade2d49caf8754c43dc69d177b6b6dc8b5dfb27fd27850f8218cd021795092001f49e0b202630c4e1b1538a7d3598d6c5a201cfc72d7342e931248ad53547708a1b9586ca0ac1eb4db2d7d9bbedced670c25fd60852d987e2f95079559b99ced98e083c2fa369bb72f1e2f56ed10e37d1bc1eec49ac826aa9fafc78e77d3b18de45ef5e1021117dc49e00df5aa32d74533c6c9c6503619823ce7fa2943c91ed08c1337081cc1dbd627f82823c4699ceee0d7f443623982fd54768fad5fc77ccdacf30403474bc2bd014e27df87961187224e8340555a031f36bcf33fd5cce90784dc03cc3f8c5d4f9ff0d4051494019a5e8235f082bc12e62dc1c1b27fdc5d313750271022eb4dda1a271e3fc3fbc759f76b4ea7761a2887f3953de9306338dca0d19c4777af71089bc3fac3a03969814376e79a30c7906169ef59eda64da9652edf101c987ba46e99c8708b14435f8396ddb5d9e279907896e47f7553644982bc01988e656d4ed1b0c20fc04cba8a1acd0ba632eb2382e8729c334ea72016a6f5c388e3d7370a223df508405140b68122e19e713b444864ff263e75b6b1552b14f34c24f2e97f730b17c6f3a2ebd10b8a937daaf7375c00fe49930087d21d585004566856207e001986cb6d7ec5440d9658ffe429caf72d6d647f36439ff3495caa06bda3e0a49ccabfbf8abb7a71bc83daa49f3cf0a5950ae9a617f7b4133727cca5b7329fd7ade34300f52dfc28504efd295bb3f7be4e51d49bbc68adb78640b79137715c6283db400a4dbcc4672e78ed7fca042b57ba6c9b35a8f51ca4b8eaaed1898e1d5d9984fbc30a9a6dc6bf27c64e623e29db360ee1577898326c0d666b7a6561363ecd3e34fcfbe1c02cfe616f816a07b566705e81e38910debaa963aebea996f7719efeab4306a8358d70c711c0faba0b659e3586a25b95c948573a7b4e3f1d5af924927dc2fc52a41961511254d2528b68af0912ad20ad3fd869eb0e5678e093ee8c1f2da080116a5039193fc9f0307dca1eb0e11442412f52296b8c3a02f640a6400d7b5a29681ae52610267156f3bc63e084c5e90253da4afed0bbe2c16018c7cd8e320c6a8094a2f40e1b0f07f1b49c2c2473f160bdaac9d544530170a675b4c09c79b323527934dad4c4f8e692747b983fce80e019a5ccec0a7bbabf57617bf6aa41a04a3df7b7033b1f9f5446a1038a5b45ad42e6f79efe104fd7704e8c03f65d2d201b745f8b6378b512f17f89be31637b1d2c5e199dcdd0feb7f81a79be0234594483c27a5ffe204a48ee702759db8d5798e953519bbb50d72e59765f79ff66a512b79ff54ddf35ef5530b9add3900812f215619b26d663e9a1b940a15c197119d3f9da3859a6759240419b637c6028527c47a1271146fda122a0283aa00813b8216682f7b0750a0afd76463ea5a5674bf010dbbe45f91a5c4a644073306ef84ab98cee25e6d5924e65d9f8bc18c5172133943d9eecf3f9658366286fb5b6b2f0e16f2601b75f2d43372a3a9ea221241baff7c245c39184db829bc737114658ff593c5a8b614fc7ae1af7b0fdf685df505898fe512edecfe0d6d1f31e4fe7ce5c3bdb3e0f48edfc39aa8a670dda55caf9e989c82ce6cc1b09ec844de10d99726dc9d9f0c64815bb50c9bb2471332a9d69013aa0673249acf2d4d70bcdc0ddd6506232561a11c2819f3a6c82529587e1be1eaae90b02b34aaf54b667f77b11c4050dd3d68d998845e454a86fa712bb9a55a2e4d895e2bd55333bd7390d017a0c6c58257d2e98d857be9cddab"}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001140)={0x3, &(0x7f0000000040)=[{0x1, 0x1, 0x9}, {0x4d, 0x8b}, {0x6, 0x0, 0x7, 0x50000}]}) open(0x0, 0x0, 0x0) [ 466.831363][ T29] audit: type=1800 audit(1599771111.566:8): pid=9785 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15733 res=0 20:51:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x100, 0x9, 0x0, 0x1f}, {0x0, 0x4, 0x8, 0x7}, {0x0, 0x5e, 0x7, 0x8}, {0xfa, 0x1f, 0x7f, 0x5}, {0x4, 0x6, 0x40}, {0x6, 0x6, 0x2, 0xffffffff}, {0x8, 0x6, 0x3f, 0x2}, {0x5, 0x2, 0xff, 0x401}]}) 20:51:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ptrace$setregs(0xd, 0xffffffffffffffff, 0x2, &(0x7f00000000c0)="1a780f581b238492482af5192112590f88f88648f3b401d9930a746f7a685da0d4402628df8de1316ced745a6a86fcdd6e222da94614dfd9655e379302089e22abfe92e88ed2") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r2, 0x8, 0x80000}) open(0x0, 0x0, 0x0) 20:51:52 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000180)=""/75) open(0x0, 0x0, 0x0) 20:51:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x100, 0x9, 0x0, 0x1f}, {0x0, 0x4, 0x8, 0x7}, {0x0, 0x5e, 0x7, 0x8}, {0xfa, 0x1f, 0x7f, 0x5}, {0x4, 0x6, 0x40}, {0x6, 0x6, 0x2, 0xffffffff}, {0x8, 0x6, 0x3f, 0x2}, {0x5, 0x2, 0xff, 0x401}]}) 20:51:53 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x100, 0x9, 0x0, 0x1f}, {0x0, 0x4, 0x8, 0x7}, {0x0, 0x5e, 0x7, 0x8}, {0xfa, 0x1f, 0x7f, 0x5}, {0x4, 0x6, 0x40}, {0x6, 0x6, 0x2, 0xffffffff}, {0x8, 0x6, 0x3f, 0x2}, {0x5, 0x2, 0xff, 0x401}]}) 20:51:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2000000000000178, &(0x7f0000000040)=[{}, {0x4d, 0xfc}, {0x6, 0x0, 0x0, 0x6}, {0x81, 0x60, 0x20}, {0x5, 0x8, 0x2, 0x7}, {0x7, 0x0, 0x2, 0x1}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'hsr0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f80)={&(0x7f0000001740)={0x834, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x8, 0x2}]}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x41}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffff1e5e}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1e}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xae}}, {0x8}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9428}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x72}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4000}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1fe2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x834}, 0x1, 0x0, 0x0, 0x20008000}, 0x820) r10 = open(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fbe30601f95959aa2a64a7c339cd156a67389dc3eea26ec900eb8b34c7cc56f4dd0325c4843976ff1987799b6a2d41b60536f94aae0c56cf33c3598e169f5fa152e45ca2224574efef460cfeafe06328e859814bd9195674d8e7abd9a3bb9d6fde28f556e1b6a2a24e777cc620ed6cc43b9d9f9079e7b9ccc2f5efe7a6bb242fa9604388ecf7e83ad4e18b0a5b9954ee573934ac50567b88da95c6df3fffe3daf023b89699d905f20de1026c838701fe4ed7b7c2b4b88b575721f6517dd814b7bac7011d178c068fcdfbe67eabe2e0c45fe5bc80902cde6b37a754ae6a1d4b9bf6f0"], 0xe3, 0x2) ioctl$KVM_SET_XSAVE(r10, 0x5000aea5, &(0x7f0000000200)={[0x3, 0x15f, 0xd77, 0x100, 0x1, 0x78, 0x6dc, 0x1ff, 0x6, 0xffff, 0x80000000, 0x2, 0x4, 0x1000, 0x20, 0x10001, 0x4, 0x7, 0x80, 0x800, 0x8, 0xe751, 0x8, 0x0, 0x1d8, 0x8001, 0x4da, 0x1, 0x3, 0x81da, 0xfffffffd, 0x80000000, 0xec, 0x4, 0x5, 0x400, 0x3, 0x80000001, 0xed, 0x6, 0x7, 0xfffffe01, 0xce3, 0xc5, 0xff, 0x5, 0xa6d5, 0x5, 0x7, 0x8, 0xfffffff8, 0x8, 0x7, 0xce6, 0xff, 0x7fff, 0x2, 0x7f, 0x0, 0xfffffffa, 0x6, 0x3, 0x800, 0x7, 0x1f, 0xfffff3c0, 0x240b, 0x8, 0x7a, 0x8, 0x100, 0x5, 0x42e, 0x101, 0x1, 0x4, 0x20, 0x1c, 0x20, 0xce, 0x2, 0x39, 0x200, 0x9, 0x0, 0x7, 0x401, 0xdde4, 0x8000, 0x1ff, 0x4, 0x8001, 0x7, 0x3ff, 0x4, 0xfffffff7, 0x9, 0x4, 0xe5c, 0x7ff, 0x8, 0x1, 0x3, 0x81, 0x9, 0x9, 0x42, 0xfffffffd, 0x6, 0x401, 0x1000, 0x2, 0x8000, 0x1, 0x5bb, 0x200, 0x6, 0x3582f43e, 0xd937, 0x4, 0x800, 0x5, 0xfff, 0x200, 0xa85, 0x3ff, 0xf3, 0x5e260a4e, 0xb4c9, 0x0, 0x0, 0x5c59, 0x3f, 0x8001, 0x2, 0x1, 0x6, 0xdc, 0x7, 0x800, 0x7, 0xfffff800, 0xf8, 0x6, 0x7, 0x1, 0x1a1d, 0x8, 0x3, 0x3, 0x3, 0xffffff00, 0x5, 0x1, 0x2, 0xe57, 0x101, 0x7fffffff, 0x8, 0x40, 0xfffffffd, 0x4, 0x8001, 0x9f, 0x7, 0x22, 0x4, 0xffffff5c, 0x20, 0x8, 0x1, 0x401, 0x24b, 0x0, 0x4, 0x39b754d5, 0xffffffff, 0x6, 0x5, 0x2e, 0x1, 0xfffffff9, 0x3, 0x0, 0x9, 0x7, 0x0, 0x3, 0x5c8, 0xd3, 0x6, 0x9a, 0x81b, 0x83bb, 0x4, 0x0, 0x8, 0x0, 0x4, 0x1, 0x400, 0x0, 0x1, 0x1, 0x1, 0x80000000, 0x4, 0x0, 0x0, 0x18, 0x3, 0x9, 0x2, 0x2, 0xffff, 0x9, 0x2, 0x120000, 0xffff, 0x4, 0x5, 0x3, 0x7fffffff, 0x9, 0x88, 0x3, 0x26f, 0x6, 0x3, 0x0, 0x1, 0x5e1, 0x3, 0x8, 0x2d2, 0x1ff, 0x7ff, 0x1000, 0x2, 0x5, 0x73b8, 0x833c, 0x1, 0x227, 0x4, 0xb62, 0x7, 0x7, 0x0, 0x1, 0xe98, 0x100, 0x6, 0x1000, 0x20, 0x20, 0x1, 0x1, 0xff, 0x1, 0x6, 0x7, 0x5, 0x4, 0x20, 0x2, 0x9e54, 0x4, 0x2, 0x6d91ffbb, 0x9200, 0x8, 0x4, 0x69fc, 0x80, 0x5, 0x1a5, 0x6, 0xb7e, 0x1, 0x6, 0x6dc, 0x5, 0x58bb, 0x80000000, 0x9, 0x9690, 0x6, 0x6, 0x1000, 0x5, 0x200, 0x40, 0x3f, 0x9, 0x5, 0x7fffffff, 0x91, 0xfffffffd, 0x3, 0x7, 0x0, 0x9, 0x0, 0x50000000, 0x4, 0x8, 0x91f, 0x8000, 0x101, 0x8000, 0x5, 0x7fff, 0x4d9cf30, 0xfffffffa, 0x308e, 0x8, 0x0, 0x53, 0x84, 0x2a5d1227, 0x20000, 0xfffffff8, 0x0, 0x0, 0x9, 0x2, 0x3, 0x80, 0x10000, 0xfffffffd, 0xff, 0xf318, 0x3f, 0x3, 0x7ff, 0x7, 0x0, 0x5, 0x5, 0x32a2, 0xfff, 0x40, 0x7, 0x2, 0x80, 0x4, 0xfffffffa, 0x2, 0x1, 0xfffffffb, 0x20, 0x2b8a8ae5, 0x100, 0x6, 0x7, 0x4, 0xae, 0x2, 0x3, 0x7fff, 0x0, 0x6, 0x0, 0x6, 0x1, 0x6, 0x4aea, 0xffffffff, 0x1, 0xfffffffd, 0x4bd, 0xfff, 0xa6a, 0x93, 0x100, 0x100, 0x7fff, 0x2, 0x3, 0x7, 0x5, 0x9, 0x9, 0xae, 0x8, 0x7fff, 0x8, 0x7, 0xe1, 0xa022, 0x1, 0x1, 0x3, 0x7, 0x3ff, 0x200, 0x54, 0x1e, 0x10001, 0x5, 0x49c9, 0x10000, 0x53be, 0x7, 0x9, 0x23, 0x551ddca1, 0x5, 0x1, 0x0, 0x800, 0x2, 0x4, 0x814, 0x6, 0x9, 0x0, 0x3, 0x8001, 0x8000, 0x9, 0x0, 0x5, 0x7f, 0x0, 0x3ff, 0x5, 0x5, 0x7ff, 0x36, 0x80000000, 0x400, 0x800, 0x1, 0x1, 0x93c, 0xec1c, 0x9, 0x10001, 0x88, 0x401, 0x2, 0x10000, 0x101, 0x0, 0x20, 0xe1, 0x80, 0x4, 0x7fffffff, 0x9, 0x9, 0x58, 0x4, 0x8, 0xceb, 0x4f0, 0x0, 0x1f8, 0x8, 0x1607, 0x101, 0x7, 0x80000000, 0x3, 0xfffffc00, 0x3, 0x746b, 0xf6, 0x1ff, 0x7ff, 0x40, 0xdb, 0x6, 0x9b9, 0x9, 0x89, 0x7, 0xbc1, 0x6800, 0x1, 0x5, 0x4800, 0xfffffffc, 0x6a3, 0x4, 0x7803, 0x399, 0x800, 0x2000000, 0x800, 0xbb5, 0x0, 0x2, 0x0, 0x5, 0x7ff, 0xfffffff9, 0x6, 0x4, 0x9, 0xffffffff, 0x3b2, 0x7, 0x10000, 0x1f, 0x1000, 0x7ff, 0x3ff, 0xfffffff7, 0xc8b, 0xffffffff, 0x101, 0x9, 0x5, 0x800, 0x0, 0x1, 0x19, 0x401, 0x4b4ee398, 0x4, 0x8e8f, 0xd09, 0x2, 0x1000, 0x3, 0x1ff, 0x3, 0x9, 0x7, 0x4, 0x1d8d, 0x6, 0x8, 0x81, 0x3, 0x1, 0x7, 0x80, 0x9, 0x5, 0x80000000, 0x3, 0xfffffff7, 0x88c, 0x9be, 0x86, 0x9, 0x8, 0x8, 0x2, 0xbeb1, 0x1, 0x9, 0x1f, 0xe2, 0x1ff, 0xfffffff7, 0x10001, 0x7, 0x40, 0x44, 0x7, 0x20, 0x0, 0x0, 0x9, 0x9, 0x7ff, 0x11, 0xaaf0, 0x45, 0xfffffff8, 0x1ff, 0x20, 0xfff, 0x1, 0x5, 0x9, 0x7fffffff, 0x80000000, 0x14cc, 0x1000, 0x8, 0x6, 0x10000, 0x6, 0x20, 0x9, 0x457c, 0x8, 0x7, 0x471, 0x4af, 0x4, 0xe399, 0x4f, 0x86b7, 0x4, 0x6, 0x3, 0x80000001, 0x3, 0xfffffffb, 0x200, 0x3, 0xff, 0x0, 0x2, 0x9, 0x10001, 0x8, 0x800, 0x8, 0x7, 0x1000, 0x3ff, 0x0, 0x400, 0x80000001, 0x1, 0x3, 0xc8e, 0xffff, 0x1, 0xd5, 0xf1f4, 0xffffffff, 0xffffffff, 0x9, 0x1000, 0x1ff, 0x2, 0x20, 0x3f, 0x6fd10cf8, 0x0, 0x3ff, 0x0, 0x10000, 0x8, 0x1162, 0x2, 0x5, 0x1, 0x10000, 0x9, 0x27140533, 0x7, 0x5, 0xe2, 0x10000, 0x9, 0x81, 0x1, 0x1ff, 0x8, 0xff, 0x8001, 0xffff2440, 0x9, 0x2b21, 0xffffffff, 0x3, 0xa9f6, 0x80000000, 0xd5, 0x1, 0xbcc, 0xe56, 0x8, 0xc9, 0x2, 0x1, 0xfffff1dc, 0xfffffff9, 0x1000, 0x6, 0x40, 0x8000, 0x0, 0x3, 0x4, 0x4, 0x800, 0xe3, 0x3, 0x0, 0x3, 0x30000000, 0x7, 0x3, 0x3f, 0x5, 0x800, 0x4, 0x1ff, 0x3f, 0x6, 0x6, 0x7f, 0x2, 0xffffff00, 0xfff, 0x6, 0x10d97eef, 0x3, 0x4, 0x0, 0x5, 0xffffffff, 0x7, 0x0, 0x1, 0x20, 0x81, 0x40, 0x3, 0x7, 0x8000, 0x20, 0x2, 0x81, 0x1, 0x1f, 0x2eb, 0xfffffff8, 0x4, 0x8dd6, 0x7, 0x4, 0x4, 0x5, 0x55f, 0x10001, 0x192f, 0xfffffffc, 0x8, 0x1ff, 0x6, 0x440, 0xde9, 0x1, 0xfffffff9, 0x7ff, 0x8, 0x35, 0x6, 0x72, 0x8, 0x4, 0x8, 0xfd, 0x3f, 0x50, 0x1, 0x1, 0xfffff07c, 0xfffffff7, 0x0, 0x20, 0x1, 0xc2, 0x5, 0xfff, 0x4fb, 0x7f, 0xffff, 0x0, 0x8, 0x4, 0x0, 0x77, 0x3, 0xe3c, 0x9, 0x9, 0x78, 0xffffa326, 0x5, 0x3, 0x9f99, 0x4, 0x9, 0x6, 0x8, 0x7fffffff, 0x44, 0x100, 0xd, 0x66c, 0x10001, 0x5, 0x7, 0xa5, 0xff, 0xd69, 0x8, 0x4, 0x1f, 0x5, 0x2, 0x4, 0x21fe, 0x9, 0x80000001, 0x1c, 0x7fffffff, 0x3, 0xfff, 0x8, 0x6, 0x8, 0x4, 0xf8, 0x6, 0xe3, 0x7, 0x7, 0x7, 0x4, 0xffffffff, 0x100, 0x4, 0x2, 0xde8, 0x6, 0x3, 0x2, 0x724, 0x5, 0x1, 0x400, 0x2, 0x7ff, 0x6, 0x2, 0x2, 0x8, 0x10000, 0x8000, 0x8001, 0x4, 0x36c4, 0x3, 0x860, 0x3ff, 0x4, 0xffffffff, 0x5, 0xfffffffd, 0x2, 0x2a3f, 0x3, 0x0, 0x4, 0x5, 0x9, 0x3, 0x0, 0x7, 0xfffff1e9, 0x8c2, 0x0, 0xffffffe0, 0xfffffff9, 0x0, 0x20, 0x5f10, 0x10000000, 0x400, 0x3, 0x2, 0x845, 0x7ff, 0x8, 0x1, 0x0, 0x5, 0xff, 0x101, 0x508a6ab6, 0x223, 0x7, 0x2, 0x1, 0x1, 0x3, 0x10001, 0x4, 0x3, 0x6d, 0x8, 0x8, 0x1, 0x2, 0x2c3, 0xac, 0x1, 0x4, 0x47, 0x10001, 0x3d8, 0x3ff, 0xea, 0x8, 0x800, 0x8, 0x4, 0x3800, 0x7, 0x8, 0x7, 0xfffffffd, 0x0, 0x9, 0xfffff801, 0xffffff7f, 0x8, 0x3ff, 0x6, 0x3f, 0x4, 0x0, 0x40, 0x80, 0x9, 0xce0, 0x1, 0x100, 0x6, 0xfffffff7, 0x5, 0xfffffffc, 0x3, 0x6, 0x1, 0x5, 0xfffff001, 0x3, 0x1, 0x20, 0x1, 0xffff, 0xf4e5, 0x401, 0x8000, 0x2b15, 0xfffffffd, 0x4, 0x7d, 0x4, 0x6, 0x1, 0x2, 0xb8f4, 0x8000, 0x3, 0x9f0, 0x20, 0x0, 0x7fff, 0x800, 0x7, 0x0, 0x7ff, 0x0, 0xfffffffb, 0x1, 0x916c, 0x400, 0x7c, 0x0, 0x8, 0x3, 0x8, 0x0, 0xc, 0x6, 0x7, 0x0, 0x101, 0x8, 0x81, 0x1, 0x800, 0x5, 0x6, 0xfffff800, 0xffff, 0x60, 0x8, 0x8, 0xc000000, 0x2, 0x4, 0x6, 0x6, 0x8, 0x4, 0x0, 0x6, 0x4, 0x7, 0x7fffffff, 0x7, 0x76b17774, 0x9, 0x10001, 0x8, 0xdd, 0x1, 0x0, 0x7b00, 0x2, 0x3ff, 0x5, 0x5, 0x3, 0x5, 0x8, 0x6]}) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000001200)={0x81, 0x1, 0xda, 0x5, 0x40, 0xbc, 0x1, 0x8, 0x3f, 0x4, 0x80, 0x7f, 0x3, 0x3}, 0xe) 20:51:53 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000180)=""/75) [ 468.643511][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 468.712630][ T9814] bridge1: port 1(syz_tun) entered blocking state [ 468.719364][ T9814] bridge1: port 1(syz_tun) entered disabled state [ 468.728927][ T9814] device syz_tun entered promiscuous mode [ 468.745003][ T9809] bridge1: port 2(netdevsim0) entered blocking state [ 468.752018][ T9809] bridge1: port 2(netdevsim0) entered disabled state [ 468.761271][ T9809] device netdevsim0 entered promiscuous mode [ 468.840514][ C1] scsi_io_completion_action: 5 callbacks suppressed [ 468.840671][ C1] sd 0:0:1:0: [sg0] tag#7465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 468.858300][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB: Test Unit Ready [ 468.865019][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.874868][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.884765][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.894713][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.904608][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.914483][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.924370][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.934256][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.944136][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.954017][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.963886][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.973864][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.983733][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[c0]: 00 00 00 00 00 00 00 00 [ 468.991915][ C0] sd 0:0:1:0: [sg0] tag#7466 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.002557][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB: Test Unit Ready [ 469.009254][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.019187][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.029116][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.039087][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.045001][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.048985][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.068013][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.077967][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:53 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 469.087833][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.097714][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.107572][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.117445][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.127337][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.137206][ C0] sd 0:0:1:0: [sg0] tag#7466 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0xa}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000100)=0x7) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000000c0)=0x1, 0x4) open(0x0, 0x2000, 0x6f) 20:51:54 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:51:54 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:51:54 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:51:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x0, 0x6}, {0x4d}, {0x401, 0x0, 0x0, 0x4fffd}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) fcntl$getown(r0, 0x9) [ 470.100024][ C1] sd 0:0:1:0: [sg0] tag#7467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.110850][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB: Test Unit Ready [ 470.117515][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.127518][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.133017][ T9836] x_tables: unsorted underflow at hook 2 [ 470.137391][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.152820][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.162789][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.172671][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.182546][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.192425][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.202288][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.212209][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.222090][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.231967][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.241852][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:55 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 470.478732][ C1] sd 0:0:1:0: [sg0] tag#7468 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.489428][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB: Test Unit Ready [ 470.496221][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.506124][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.516029][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.525916][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.535808][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.545702][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.555582][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.565468][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r1, 0x28, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x8005) [ 470.575364][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.585251][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.595129][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.605103][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.614983][ C1] sd 0:0:1:0: [sg0] tag#7468 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:55 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:51:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2b, 0x9, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x1) open(0x0, 0x0, 0x0) 20:51:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 471.308523][ C1] sd 0:0:1:0: [sg0] tag#7469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 471.319306][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB: Test Unit Ready [ 471.326092][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.336033][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.345863][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.355749][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.365617][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.375451][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.385293][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.395182][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.405027][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.414881][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.424729][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.434570][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.444395][ C1] sd 0:0:1:0: [sg0] tag#7469 CDB[c0]: 00 00 00 00 00 00 00 00 [ 471.554184][ C1] sd 0:0:1:0: [sg0] tag#7470 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 471.564917][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB: Test Unit Ready [ 471.571678][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.581521][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.591358][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.601192][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.611117][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.620996][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.630826][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.640670][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:56 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:51:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x0, 0x1}, {0x4d, 0x0, 0xac, 0x3c17b0cd}, {0x6, 0x0, 0x1, 0x50000}]}) open(0x0, 0x0, 0x0) [ 471.650505][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.660336][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.670185][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.680092][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.689931][ C1] sd 0:0:1:0: [sg0] tag#7470 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:56 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:51:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000180)='cgroup.controllers\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) 20:51:56 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 472.465642][ C1] sd 0:0:1:0: [sg0] tag#7474 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.476369][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB: Test Unit Ready [ 472.483134][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.492986][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.502839][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.512732][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.522583][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.532419][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.542256][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.552083][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 472.561907][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.571847][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.581756][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.591598][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.601431][ C1] sd 0:0:1:0: [sg0] tag#7474 CDB[c0]: 00 00 00 00 00 00 00 00 [ 472.715331][ C1] sd 0:0:1:0: [sg0] tag#7481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.725996][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB: Test Unit Ready [ 472.732782][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.742647][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.752517][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.762360][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.772203][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.782053][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.791906][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.801752][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.811595][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.821447][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.831286][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.841130][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.851087][ C1] sd 0:0:1:0: [sg0] tag#7481 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:57 executing program 0: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x20, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x2080, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0x9, "52755e5a81be9c38196c7f155e1e03bebff37b2df8d9a3882d8a70eb47b0101b", 0x1, 0x81, 0x7, 0x40000, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) 20:51:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 473.268710][ T9878] x_tables: unsorted underflow at hook 2 20:51:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 473.325713][ T9878] x_tables: unsorted underflow at hook 2 20:51:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:51:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffff80, 0x1a000) ioctl$CHAR_RAW_GETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) open(0x0, 0x0, 0x0) 20:51:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3}, {0x4d}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 473.743563][ C1] sd 0:0:1:0: [sg0] tag#7484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.754218][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB: Test Unit Ready [ 473.761028][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.770921][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.780783][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.790626][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.800467][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.810312][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.814266][ C0] sd 0:0:1:0: [sg0] tag#7485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.820238][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.830713][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB: Test Unit Ready [ 473.840417][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.846922][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.856711][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.866457][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.876114][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.885799][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.895499][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.905181][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.914885][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.924574][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.934278][ C1] sd 0:0:1:0: [sg0] tag#7484 CDB[c0]: 00 00 00 00 00 00 00 00 [ 473.943972][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.961292][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.972539][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.982487][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.992420][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.002358][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.012285][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.022204][ C0] sd 0:0:1:0: [sg0] tag#7485 CDB[c0]: 00 00 00 00 00 00 00 00 20:51:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x401) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8) timerfd_create(0x2, 0x800) open(0x0, 0x0, 0x0) 20:51:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3}, {0x4d}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:51:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:51:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3}, {0x4d}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 474.835792][ C0] sd 0:0:1:0: [sg0] tag#7486 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.846476][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB: Test Unit Ready [ 474.853281][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.863206][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.873080][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.882962][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.893359][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.903227][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.913103][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.922973][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.932839][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.942712][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.952599][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.962578][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.972459][ C0] sd 0:0:1:0: [sg0] tag#7486 CDB[c0]: 00 00 00 00 00 00 00 00 [ 474.980370][ C0] sd 0:0:1:0: [sg0] tag#7487 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.991032][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB: Test Unit Ready [ 474.997685][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.007576][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.017460][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.027332][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:59 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 475.037202][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.047065][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.056954][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.066813][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.076681][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:51:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xf4240) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000000c0)="4bad32645d95fc00049f96", &(0x7f0000000100)=""/179, &(0x7f00000001c0)="bd335691a7af25c16d29ccbc92085326518a8c7fc2c3aabf00b54a41d7f1e18f57fab569c5835b9bfa4cc816ba5ee0a4867583dd0014d0e99d21baacb1b1e6d46f7fca358c4ed97fb6e87c3f7b3bf50d9df4246d5cb698ba8ff8a569cc847e69109846e3a1736db068b350393f7899dcc64a98498208030e21357931912d70a9336dbfbf12d5d2de5cc9af3b19518a6a3f2a7d55dad446771105f2263f6712f2", &(0x7f0000000280)="4ee90c63107a3a41310dc51ced14164a5c36c10c718463cc2a741efad024a524880121e1b2454101eb121166f41bc20d2a7c6e786e3bf5cce4700c922921bb3cf5aabe45942eee70bd7ec1b7f499892a6e5404951ddbd112734f01c28936213ec866772bfd147fba68106d0b5b22f1669267810abfde2d9f02a6897bac98dce9be6f4ad4f129de8727227a3903fd7cd4301130e556c2fe1ec023569859ccbedacbeda222d986a4c89772b046fd3cf9809ed8690b2a6e84a4f7bb45b866dae6b38b018f8ba25b14900bbbb7dc5c22931dcf623b99a625f43a4d3f9cd5fa906d90fac105728c9d33e1313cf497b912629905f4baab1c", 0x7, 0xffffffffffffffff, 0x4}, 0x38) [ 475.086558][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.096429][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.106432][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.116291][ C0] sd 0:0:1:0: [sg0] tag#7487 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:00 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x0, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:00 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x0, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) timer_delete(0x0) open(0x0, 0x0, 0x0) [ 476.073332][ C1] sd 0:0:1:0: [sg0] tag#7434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.084090][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB: Test Unit Ready [ 476.090893][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.100954][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.110897][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.120871][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.130703][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.140664][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.150692][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.160674][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:00 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x0, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 476.170630][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.180572][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.190466][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.200384][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.210276][ C1] sd 0:0:1:0: [sg0] tag#7434 CDB[c0]: 00 00 00 00 00 00 00 00 [ 476.275429][ C0] sd 0:0:1:0: [sg0] tag#7435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.286112][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB: Test Unit Ready [ 476.292893][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.302771][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.312639][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.322514][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.332375][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.342242][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.352118][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.361991][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.371869][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.381737][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.391601][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.401466][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.411326][ C0] sd 0:0:1:0: [sg0] tag#7435 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x20, 0x40, 0x100, 0x1, @local, @remote, 0x8, 0x10, 0x80, 0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRESHEX=r6, @ANYBLOB="000000010000000705c98c4ef7bdbcce3fed3ba6c35c001e00824a9e2a36e3f51aa09e78eaef3913a8d8486395781ab04c2ea4efd4cec27c38610660fedc84c529bb7d47408a4f439d2be4f84fb60c0fb9118eb46c56a10cfdd276e28466b95321def6aa94497e131edb4f4ef512dc27fbd5d7cf04ef66ec7d120e78ab3dae42e55aee39"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x130, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x805) open(0x0, 0x0, 0x0) 20:52:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 476.874061][ T29] audit: type=1326 audit(1599771121.606:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9925 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 477.197526][ C0] sd 0:0:1:0: [sg0] tag#7436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.208842][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB: Test Unit Ready [ 477.215659][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.225548][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.235443][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.246708][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.251251][ C1] sd 0:0:1:0: [sg0] tag#7437 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.256547][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.266985][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB: Test Unit Ready [ 477.276675][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.283232][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.292920][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.302628][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.312451][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.322150][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.331836][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.341535][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.351315][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.361014][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.370723][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.380421][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.390114][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.399817][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.409499][ C0] sd 0:0:1:0: [sg0] tag#7436 CDB[c0]: 00 00 00 00 00 00 00 00 [ 477.419118][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.436353][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.446255][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.456243][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.466157][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.476041][ C1] sd 0:0:1:0: [sg0] tag#7437 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 478.053660][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.064918][ T29] audit: type=1326 audit(1599771122.796:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9936 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 478.369689][ C0] sd 0:0:1:0: [sg0] tag#7438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.380364][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB: Test Unit Ready [ 478.387027][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.396949][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.406824][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.416694][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.426624][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.436505][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.446375][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.456254][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.466118][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.475980][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.485848][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.495718][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.505583][ C0] sd 0:0:1:0: [sg0] tag#7438 CDB[c0]: 00 00 00 00 00 00 00 00 [ 478.635504][ T9950] IPVS: ftp: loaded support on port[0] = 21 [ 479.250998][ T9950] chnl_net:caif_netlink_parms(): no params data found [ 479.525145][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.532466][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.542062][ T9950] device bridge_slave_0 entered promiscuous mode [ 479.644794][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.652100][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.661705][ T9950] device bridge_slave_1 entered promiscuous mode [ 479.819942][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.860961][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.995833][ T9950] team0: Port device team_slave_0 added [ 480.027398][ T9950] team0: Port device team_slave_1 added [ 480.155476][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.163419][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.189516][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.219521][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.226597][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.253131][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.454949][ T9950] device hsr_slave_0 entered promiscuous mode [ 480.491781][ T9950] device hsr_slave_1 entered promiscuous mode [ 480.511783][ T9950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.519546][ T9950] Cannot create hsr debugfs directory [ 480.591546][ T8711] Bluetooth: hci3: command 0x0409 tx timeout [ 480.848352][ T9950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.893223][ T9950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.913629][ T9950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.933445][ T9950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.289080][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.339020][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.348109][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.372497][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.411878][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.423003][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.432338][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.439666][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.461218][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.470824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 481.480578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.489804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.497024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.524043][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 481.563146][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.596103][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 481.606845][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 481.662659][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 481.672413][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 481.682706][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 481.693354][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.702918][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.737609][ T9950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.751118][ T9950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.774508][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.784419][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.820572][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.828253][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.864396][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.937658][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.947969][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.017535][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.028219][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.053836][ T9950] device veth0_vlan entered promiscuous mode [ 482.065960][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.075157][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.115985][ T9950] device veth1_vlan entered promiscuous mode [ 482.205132][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 482.214616][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 482.223943][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.233779][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.258840][ T9950] device veth0_macvtap entered promiscuous mode [ 482.286620][ T9950] device veth1_macvtap entered promiscuous mode [ 482.354962][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.365823][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.375847][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.386437][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.396486][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.407074][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.423333][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.440697][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.450249][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.459629][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.469572][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.533863][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.544788][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.554796][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.565327][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.575280][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.585801][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.599813][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.614987][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.625809][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.660086][ T4598] Bluetooth: hci3: command 0x041b tx timeout [ 483.261823][ C0] sd 0:0:1:0: [sg0] tag#7442 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.272698][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB: Test Unit Ready [ 483.279496][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.289273][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.299273][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.309187][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.319397][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.329183][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.339097][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.349017][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.358919][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.369468][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.379228][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.389128][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.398991][ C0] sd 0:0:1:0: [sg0] tag#7442 CDB[c0]: 00 00 00 00 00 00 00 00 [ 483.430518][ C0] sd 0:0:1:0: [sg0] tag#7443 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.441169][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB: Test Unit Ready [ 483.447816][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.457823][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.467690][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.477552][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.487417][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.497269][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.507129][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.516999][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.526871][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.536857][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.546732][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.556601][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.566455][ C0] sd 0:0:1:0: [sg0] tag#7443 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x12040, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="1f0c3389049d11194830131e815c6c2f5c2d9b02520f5dc1ff4369e3890e0063f5e84b6c6c68c3e7c2623f34f9fd750e8ebb3702ebc3d8871dcf506ca361cc93cb2b564681732ae422cb0a1afa6d3176d8c3729ff87cf5e51d834ef4dc7030079e199cfd4d7034786f6c3fab4f8b78e3d77d74c600fea4bd9e0f6173cd646d1d273084e44b9116afbf61c2c234d61130fe792d328baccd980a933791aac4e11976729d27a5587f52991e153cf735ebd80fd03a18164bce8c661fb1b41ac0e84599216f459772c9e9942df28b91a0", 0xce, r0}, 0x68) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='+!\x00', 0x0, r1) 20:52:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 484.191173][ T29] audit: type=1326 audit(1599771128.926:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10173 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 484.319927][ C0] sd 0:0:1:0: [sg0] tag#7444 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.330649][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB: Test Unit Ready [ 484.337318][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.347237][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.357140][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.367006][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.376880][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.386787][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.396703][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.406797][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.416716][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.423765][ C1] sd 0:0:1:0: [sg0] tag#7445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.426576][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.426726][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.437214][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB: Test Unit Ready [ 484.446908][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.456609][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.463159][ C0] sd 0:0:1:0: [sg0] tag#7444 CDB[c0]: 00 00 00 00 00 00 00 00 [ 484.472878][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.499864][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.509783][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.519695][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.529580][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.539460][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.549244][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.559125][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.569012][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.578896][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.588773][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.598647][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:09 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x40, 0x1}, {0x4d, 0x6}, {0x6, 0x4, 0x7f, 0x8}]}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180)) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) open(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000000c0)={{0x1, 0x0, @identifier="717a1223e0d96d7f845b3f5ec3063d77"}}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) [ 484.964370][ T8711] Bluetooth: hci3: command 0x040f tx timeout 20:52:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x58840) fstat(r0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d, 0x0, 0x2, 0x9}, {0x6, 0x0, 0x6, 0x50000}]}) open(0x0, 0x0, 0x0) [ 485.512733][ C1] sd 0:0:1:0: [sg0] tag#7451 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.523515][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB: Test Unit Ready [ 485.530279][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.540124][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.549961][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.559909][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.569749][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.579580][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.589850][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.599698][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.609533][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.619363][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.629134][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.639067][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.648998][ C1] sd 0:0:1:0: [sg0] tag#7451 CDB[c0]: 00 00 00 00 00 00 00 00 [ 485.719238][ C0] sd 0:0:1:0: [sg0] tag#7452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.730023][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB: Test Unit Ready [ 485.736696][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.746626][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.756612][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.766541][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.776494][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.786435][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.797152][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.807082][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 485.817019][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.826913][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.836834][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.846735][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.856651][ C0] sd 0:0:1:0: [sg0] tag#7452 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:10 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x3}, {0x4d}, {0x6, 0x0, 0x0, 0xfffffffa}]}) r1 = dup2(r0, r0) write$UHID_INPUT(r1, &(0x7f0000000140)={0x8, {"d73666f87bfce858bc29f2697235e2d512ed84f41c27d238f0820299c50b8635b8af279dcbd9016c1d7eedf75ec9ce30d010280e3a1b36ac55a4459150bfa92fc86f55e3efea195673454b78fbeb5a9318068659fca20e5170f91fedf562b2a4928923c985efcc1698fb408dcd1f617608c18ee7c0df2e3d559da7182f2f70529a0491197807e85fed282a8be9ecab63f8a69fa16deb5c64abf090b03ec932b21792d37a4501ee7a7cc60006822c2c68cf3e4c206724703cc3f2bd81bf82e82665c9c43d352140cedacc3f4257c5b44134bcd40e4bd6d0af46c405f4a23046e377bd77ebb4fe65b886df48c358821eade3e18e59068e53710c7226402b1eb7b52d8cea4518ed3e424168c1b3521d5b5002ea2e038419132b2cdb6949d26b87a7a66842f56e2f4ab3125e0187f504694a3bf627f9adc031a6d40dfb329d6d33ccff328394fc7beae424caacdd8e1d8028c8a79f50c89956624da4b496c3c7070449ed167aa231f58039c18e1755a9bff59cd32761c99ffced428f16a07874e1703b22135eb100cc109b238b278d65fa6a99ef384430e3b756244855c479d9a3e5578678eb693ce82c9f751ae847e9ef8b5f095350a7631df5d4eb0fd0731dc5bdef18e68f515609d96c6cb5ad46c29174d4a7c4575e9410c43bc7a7ca7bed5aedc3aff83b8663f0a99137a10d642072c787f3894ba7a3ce5e2082cf3d5e168c7ae08dd616a29ef9c7dcf41393ed5a4e94a15bf2d26ecf7c3cf51d9fd5b278912fdf7713968e9ced0f478d51a6042543a146aa064066ae1f27854e07f1f3adec9937a7528354907f8a82be766fc3a57f585f4c3e72689a4d51d0f3e11803f535575e2ea01a4cb1f1128b400d27cca59c1af2cde132a1746ae6023c5a5422dcde77a5c470f23bcb0c196b2f87756947a4b18164314d7ae8ac21b5e0b4dce63795c3d9efd2282e49392a9b6fc151afd36dbbecdee0748e788d5825bf620f4bfa8e821482d2d93f7479b5f11579dcf0d493cd7e7d00a76f80945e761384e4ddb7142b7866c13d5e46f4fded655290b62751529462506527e3c79b9a22e7e0d697d289595b6ece4c951d4a242089526a8a7f5cb92cad3d3b13dabdba9a75d316d581b45d659828f4ae9d56083460f79b67bac6ebb4855f6c5f4c33d34c81f4d74b08ba5fbd96bb3ecb66a507ce126073115bd07bc6005911a8018cfda9ffa28e7a5aace549915660a6dc8fba92a733365e4537428d32243360dc1eeef489e092544d428234c25061ec287d4404c350588c27196eccbd1eb36d71e026676224e29d14a3e405f92ec964ccd0ec62be43f9665f5d6b783f9bc285ab87ce50058518b7d7b7a9025882a683f8c719b4d6b8b80aef2a553be49c783c61bb4508b5f150d145cff091dcb2a73b902f82023a124ad821ae1ab1abf121159c1845422acb6a590da8d90c4dbaa20f0f6711b40a2fcac6223193adab1532698bf23634f1fc6f2f486e749fbcff9445ec46296f48bc95a74a565c22bdf7bd0473d81eafffdbe4f5557d76e4f00bc25d09de6b7559e61449128faee9083d5e0c2a8728d60b7076008c3b5d52dda3f70b6fdd80113cecfddd0ffb07d71c0026dce3d1ad596759acc88d25ae5623c1c1216f23ab3f9b8d05d5f593ed887529ff8114adcb4cf6b6fe45265fc0c15012ae32f7f49e9dd725c962f573f0227761c817b69dc4ce7ac1382ebebe8c0b928b4cb49837c8dc77d22ab4d1c9848b35faf7116afb037408f995968295eec62e1f678455cceacc7d1f39f582c63421df569a545d451036de2049e09cfb9deddad93a5b4038870793da9fd815f986b981dc323067352674c45629584837b46586eb89ac1f7c07af10e1d003fdc6ec75462b7f28a3635aad542574a9d3c3bc1d601b3db102603e7040b6023648e9dfc74a17ee8af9a3005356307ee7d36ceb1cb854d37c564fa8b22876fbf55c45680b8f18b7d2c92a78f5e453c27e926d61a00010aec433eb060d5103c1668e79d934b590200d54436f2d3472d80e9055508344b3f566271b7bddac69c85915a125c11a62bab0bef59d9d3f669f230fdabd8278d807a5a6702f6b01b0207e66004bbe30c6eb28d2862b51bd0a2678f753fe47db97e6208eae00c7c46185bcb0f161ace4e28dd8657c334df160bd4e9966cb2d4fa8ba672549a7ce79d887a93e0773dc889c5fe6e20f898d8cac917790befbdf3c28602bf880e9fd2d7d6119839e739902ff28ea676485bda161b215d3ed57c827ee671058266594bf9ffd9657ee75670f8131daca48a3683cab0f0fdf21f62d81ed27fef10a580a8320f6a018661a9731eabe5e6e8d8399ae97a64364d1e5240b245da418f39ac0b279fb0cd4ee8f1e97bd15229d519b06e936f816e3055ec94078ee29ebc0b9c91348bbeb9e3e3e58c1a3bf1fed50f1874e236a559573f40365116d2a8d3e06d98a3c43ae1f17b2da829fb4ea7753ca96c5ae79aea315576f7ff1e75b4b7dc6c7dfc2e01c0be5dc7371db18fbcd59fbf67ec3a6ab1b71b2b1be931484cc04190b72bac2b2c28989438e18bf7004ea172290b2074567ca130668d451f71daaec0160b7616241154930d93439ca26fbf4f2f7c214e3ae7264a2b969837db7523102dddb5735dc070e361ec142c556685c44b5097f9991f5db50414adc7113524f3742db84250966db7809b41d8e33187f1c61ac793ed8cdcca082bb96dddb763d947b7f9ba30950462c508a4d010773a1eee52623ced0910bef39d56f1882dbc2dcbcec6c4000c3cca9e12f02e7cdeb130ff9922f8e57895af6ad9420166e95021afe4919c79afe7e831b1ce337540634ea2c4cbbd51b80b7b2eb3163e8d67e611b99861508287d490c00a0ff3c9ebbaafa39b8d070725c69212666413f164937a860461dbc4d4133cc147943d37969a2587112ded18d800b021b96bd65e0335519d3b0306d46b38843cc54fc237d49fca90c872f58b63f5c25c8c054c77826c3b9547c7fc4d4101e49844642e9faeb9f22629a2af09ca8345edfd928680efe37d61c3cb3bda104d163eca030bf809de0dce3d35214e3044517a069df150f1d16ac99c2c6fcdc4b66cea0aaa6fe426034def52e956e9161186e1ab79ba5276d08618de3bc7bbd46f91b706aaf39602643fe88ccfc4b62f6f14d96082df4f225f69630f03248f572208ce16bf38fa3f12fb1b1a48c7d98802289a878c0fc2aeec6e76427598fc4ab9e4e6f0053003a72844a51929df90d86468984eec9eafc5785be43f5a46faeb0b52bc4e6852e8f07d185cbca9bb22f414498de81a3d11280432c95b5c0fde83f5a8ea1d08134b9aaca1bc84c5ed4829d230834b3af48a14410dc6beca33b3e92b3ce00e0bb2221741d417cfb289b3687c2dddc98ca0fed14f612dd244dec7926ebc3769e492d522620c78823821b87b40b3a373e974e6a6d9e4093443593292d351f4cda330611040f0d6faea6746e41ed1f3824285e50746211ba4c6472759f98372f5d7cf10e84b1bd6a0d7d4d7098963b654ddcc38bb05d85da0df105b13d6ffa02b497600d72425843a92f0a16c112a3477749cf05e086aa314d4796cedfac7214f57ac86fcbddac0d87f62a21d09bd824de19d6dbfc4f4036bdd39dbcd93027b986d597d610667e507284fcf808a762bfe4fcf4c39221cfcee59136b0aec560b5c1b9f8d7476a7078508bdc7e9ff146bf04b858b31ac664a2dd548651ccaa23a833ef4d044c3e4a943c5c1597a8b3da344220d16c581c7e8899b776dd6953d656206b44798f6d6824bcf6da6d8528075933042a60a840f477b991c9cf10f7d78e346115976616aac7c29debd38653fddfa0a2ac2dd4be648aef737a858d8a71667a0d2349f096c5abe43c011aaafe771058c58bf0455acef91eca1e5242fc83db950c5d606b8c40592c21d50af7550f64e1c9a77d231edc1a09a60b567d8fb24eee768b2f39bf7bd9c6bbd8f7e64dc72ab09ba135772c6b8fca03b3701beb0c43d41879fc1efad80c32093593ad26c630e67bc8bdcda6976f83bb796e199488ceb373a0e6f343d3745b632ab7d3386dd975bee3e79d2ecf98d2e04f881dee61461204f3cb376517f73fd6610d97552e12721eeca4890a813f39ac0bc64cd378c1ba70b0d93ddee848244ce7b722023258f9f17ec5bcbc021de5b9de19c813c9d8db68bed52bc40940d68d1367f2182c8b3d7c025aa84382976bfddc7e875454de9bc2c3204b153b5fb38ba902476a670a3189fb37400274eaf8d1b627066d74155a8618b2100ce3f27c3952d35d7c34c173e476caffac1f858fc04b033f16a1ea98e8dbab8d318e8ac07e144d439cc8d6774cc600924b79c83d393078901d7d25a7a2a925e63597790d18734c065650591f97a32a59a4d4e5fe38bb7303a8287bc747883aff25ea419e8ed13b80bcdc00178279816c9d7420bbf2310964464d63533e2dafc4493c578efc011f23f5124060e9dfef1a789cd5cadc933a3dbf0eb5e709f5fc0b085bf4c335a4146dae935dbdae3442fb0dadcdda5bfd957d82b7f311f1c9c52f2c3452a8c1387e0b0ed2cd91341bd99b9066e6945ddedf1116c05f7b8b814f99f2d8bef481958432628996fe6d2f1b3cc99ed417296813551dc0877675028ba5a82730e0d33e3b4f0ec7a81a85e6c0f304849c83450862ca350b6822897cdde0aa74e2237b94d2563df6428c4415b069f1bc7efd3b03a1d7b40342e49a95b79657f75d053e53da76072ed6eb3392ee80b52fb5432b6ab6488931e6657cf80fb69afe0107d342b2c8120c0a456ec4ac59db40f3e7aae44eca330bca76a3b2b340e8773bdb94ea18572b71fdfef573a5db30d9065a426c1d0a2f38e758d9e5feeaf384cfde0070406104f0f531b0c6c2a2a377dfb03da3bea9f67d46d15d952785ce8108310512d1ceea5c2db2f5d867f3fec50733f84a556d6d55e5d184ff533eb387a6bdf66a76354028327d672f0a5a1a32116aff47e157aa234307af466cfa2512c221fee18a158876ba79f43abf47a7c60ce9beec064e18e6a211d85a1284fc455a2997acfb7bf6c049e525e324206241dfe0fff91c27aa1b91044f6560c5a5507009a73d4b0c3fbe34ccdfd2d6ba0a42f02ebc665a47eb1d885c03e5a3fb63a7abef96ffc8337d4aa5cadc47f7bcd6208dc253d781c86afda4f3201a52dee8660172fbf728eb930a82163da344feb9b1b5740c0d7a36d45018a0a81b5ada73a9e71ece8e72735a88587efc033fa3bfd88307997373e98a80b73cb9eac6e88de4156e8178247b85f794c94adf02c5faef3dfb630f76181b4eaf6bdfa59db12f55530334186d4a80adb5ceb1731acbda8852835031a83644f5103c73633b12b50ff5460f13b590ea08e0f23cf1417aa7f3ec1d1f945e0dcc7c88ac42b96aec7cfa6fce223cf81521e677d62db1f6a2ebe3dab70877be113b563cd467747c17f821356175842c7eb1411afe336ba22a637a689971ba9369ccc634a9ce6a777fe13a22c36df7b5680f93370d43c3d9a87f002bf1f8f9c9fe3ee66d2e46b927a130b8430857262dbfbeac89e908d084439b66633d759dcfddeed5ee1cacf53a9cf517b7f3c7e7838164aa3c4c32969b0f0928ed128984d7fca540eed4760cbad9a1c0df57494b3c86f695c526016644a12980cbbf53d0435786506d387bfe1fea3d35cbd1e57c66a289194ca4de8581ce8a36b0956f52229c8367068eb3b05d0d50a96652f49192ad263a26c0033506de8a95bf33e9cdbdac0d31d93e88647710fbaf24f22ff06249", 0x1000}}, 0x1006) r2 = open(0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x6, 0x7ff, 0x78ed, 0x3}, 'syz1\x00', 0x9}) 20:52:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 486.434028][ T29] audit: type=1326 audit(1599771131.166:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10209 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0xffff0000 20:52:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 486.756836][ C1] sd 0:0:1:0: [sg0] tag#7453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 486.768106][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB: Test Unit Ready [ 486.774881][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.784830][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.794669][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.804645][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.813244][ C0] sd 0:0:1:0: [sg0] tag#7454 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 486.814571][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.825045][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB: Test Unit Ready [ 486.834750][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.841309][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.851049][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.860913][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.870608][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.881248][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.890950][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.900638][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.910342][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.920028][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.930445][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.940131][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.949829][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.959545][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.969238][ C1] sd 0:0:1:0: [sg0] tag#7453 CDB[c0]: 00 00 00 00 00 00 00 00 [ 486.978954][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.996201][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.006117][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.016032][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.025953][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.035850][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 487.200052][ T29] audit: type=1326 audit(1599771131.926:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10209 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0xffff0000 20:52:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xe) 20:52:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 488.032741][ C1] sd 0:0:1:0: [sg0] tag#7455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.043446][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB: Test Unit Ready [ 488.050215][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.060064][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.069926][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.079772][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.089610][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.099477][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.109335][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.119146][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.129006][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.138856][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.146548][ C0] sd 0:0:1:0: [sg0] tag#7456 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.148693][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.159138][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB: Test Unit Ready [ 488.168851][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.175588][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.185310][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[c0]: 00 00 00 00 00 00 00 00 [ 488.194999][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.212353][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.222363][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.232295][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.242225][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.252139][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.262071][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.272001][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.281912][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.291852][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.301773][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.311682][ C0] sd 0:0:1:0: [sg0] tag#7456 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x48200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001935531de464c8a1ec6729411d493a9562dd03b92feafeab67b84d566d707ae717bc58c77624b5213a13d5abcd48b87dfef2d444842e010b02e518ab8cdff310513d4b3b457fd6db8a46c8", @ANYRES16=r3, @ANYRESDEC=r2, @ANYRES64=r0], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r11, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="00060000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="c9c3512ec6594c15565d833c59"], 0x600}, 0x1, 0x0, 0x0, 0x20000001}, 0x48081) [ 488.345503][ T4598] Bluetooth: hci3: command 0x0419 tx timeout 20:52:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 489.263365][ C0] sd 0:0:1:0: [sg0] tag#7457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.275606][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB: Test Unit Ready [ 489.282393][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.292302][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.302216][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.312317][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.322254][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.332224][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.342175][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.352117][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.362053][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.371980][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.381883][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.391794][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.401694][ C0] sd 0:0:1:0: [sg0] tag#7457 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:14 executing program 0: ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000100)={"64497b33df317c4949253c71e60eee219b89fcdd0818571dd2f28aa25c3b", 0x5, 0x1, 0x7, [0x2ba5, 0x7, 0x4, 0x7f, 0xffffff01, 0x2, 0x1fda, 0x8, 0x9, 0x5, 0x6, 0x5, 0xffffff0d, 0x2, 0x461d, 0x8, 0xfffffffe, 0x4ebe]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x6, 0x4, 0x418, 0x220, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffffff, 0xa, 0x0, {@mac=@dev={[], 0x15}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac, {[0x0, 0xff]}}, 0x9cf, 0x7, 0x401, 0x20, 0x4, 0x9, 'macsec0\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x0, 0x380}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="22704e60dbc9", @private=0xa010101, @empty, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @rand_addr=0x64010102, 0xf}}}, {{@uncond, 0xc0, 0x110}, @unspec=@STANDARD={0x0, '\x00', 0x0, 0xfffffffffffffffe}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xfffffebc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @identifier="e7777868508c58d81d4ccb50ae1b355e"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x0, 0x780b, 0x0, 0x10001, 0x89df}) r2 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x80, 0x80000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000001c0)={0x4, 0x8000, 0x2}) 20:52:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 490.473823][ C0] sd 0:0:1:0: [sg0] tag#7458 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 490.484643][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB: Test Unit Ready [ 490.491424][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.501345][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.511273][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.521223][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.531142][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.541043][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.550947][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.560864][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.570771][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.580674][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.590567][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.600463][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.610362][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x800}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x8) open(0x0, 0x428000, 0x579b0d3519deab36) 20:52:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:16 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:16 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = open(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002}) 20:52:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) [ 491.712204][ C1] sd 0:0:1:0: [sg0] tag#7460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 491.722984][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB: Test Unit Ready [ 491.729739][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.739580][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.749410][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.759276][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.769053][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.778907][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.788752][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.798606][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.810360][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.820210][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.830047][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.839994][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.849886][ C1] sd 0:0:1:0: [sg0] tag#7460 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x8841, 0x8) 20:52:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r2, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0xffffffffffffff47}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4000010) 20:52:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:17 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x8841, 0x8) 20:52:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) [ 492.962267][ C0] sd 0:0:1:0: [sg0] tag#7461 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 492.972984][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB: Test Unit Ready [ 492.979787][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.989684][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.999706][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.009599][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.019475][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.029378][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.039266][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.049106][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.059009][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.068890][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.078744][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.088603][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.098472][ C0] sd 0:0:1:0: [sg0] tag#7461 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x8) 20:52:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x2) 20:52:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:52:18 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x4fffd}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) sysfs$1(0x1, &(0x7f00000000c0)='cgroup.controllers\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)=0x2) open(0x0, 0x0, 0x0) [ 494.212462][ C0] sd 0:0:1:0: [sg0] tag#7462 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 494.223213][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB: Test Unit Ready [ 494.230012][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.239898][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.249767][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.259685][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.269551][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.279412][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.289321][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.299104][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:19 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 494.308974][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.318852][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.328732][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.338592][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.348452][ C0] sd 0:0:1:0: [sg0] tag#7462 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 494.698550][ C0] sd 0:0:1:0: [sg0] tag#7463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 494.709374][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB: Test Unit Ready [ 494.716045][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.725983][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.735896][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.745852][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.755780][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.765827][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.775755][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.785680][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.795600][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.805504][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.815434][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.825323][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.835203][ C0] sd 0:0:1:0: [sg0] tag#7463 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:19 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 20:52:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000001240)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r5, r4, 0x0) getdents(r4, &(0x7f0000000240)=""/4096, 0x1000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001280)='/dev/dlm-monitor\x00', 0x40, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000012c0)=r8, 0x4) getgroups(0x3, &(0x7f0000000000)=[0xee00, 0x0, r7]) 20:52:19 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:20 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 495.538149][ C0] sd 0:0:1:0: [sg0] tag#7464 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 495.548877][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB: Test Unit Ready [ 495.555698][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.565623][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.575539][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 495.585496][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.595405][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.605302][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.615205][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.625096][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.634969][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.644906][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.654834][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.664790][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.674701][ C0] sd 0:0:1:0: [sg0] tag#7464 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 495.987526][T10356] x_tables: unsorted underflow at hook 2 [ 496.015602][ C1] sd 0:0:1:0: [sg0] tag#7467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.026368][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB: Test Unit Ready [ 496.033139][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.042988][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.052829][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.062757][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.072594][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.082429][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.092267][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.102099][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.111942][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.121775][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.131617][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.141455][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.151288][ C1] sd 0:0:1:0: [sg0] tag#7467 CDB[c0]: 00 00 00 00 00 00 00 00 [ 496.154657][ C0] sd 0:0:1:0: [sg0] tag#7468 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.169631][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB: Test Unit Ready [ 496.176301][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.186218][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.196189][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.206105][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.216022][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.225936][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.235857][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.245764][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.255659][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.265562][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.275517][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.285442][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.295337][ C0] sd 0:0:1:0: [sg0] tag#7468 CDB[c0]: 00 00 00 00 00 00 00 00 [ 496.318445][ C0] sd 0:0:1:0: [sg0] tag#7469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.330320][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB: Test Unit Ready [ 496.337003][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.346912][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.356864][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.366734][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.376599][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.386464][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.396325][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.406284][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.416157][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.426023][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.435871][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.445821][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.455677][ C0] sd 0:0:1:0: [sg0] tag#7469 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 496.793411][ C0] sd 0:0:1:0: [sg0] tag#7470 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.804151][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB: Test Unit Ready [ 496.810955][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.821265][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.831147][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.841023][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.850870][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.862392][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.872264][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.882179][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.892053][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.902055][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.911963][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.921876][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.931781][ C0] sd 0:0:1:0: [sg0] tag#7470 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:21 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 497.342257][ C0] sd 0:0:1:0: [sg0] tag#7471 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 497.353222][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB: Test Unit Ready [ 497.360039][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.369980][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.379889][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.389857][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.399778][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.409688][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.419593][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.429571][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.439477][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.449335][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.459197][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.468969][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.478872][ C0] sd 0:0:1:0: [sg0] tag#7471 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:22 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 497.881376][ C0] sd 0:0:1:0: [sg0] tag#7472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 497.892057][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB: Test Unit Ready [ 497.898730][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.908665][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.918554][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.928439][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.938314][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.948200][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.958078][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.967954][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.977821][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.987692][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.997645][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.007518][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.017395][ C0] sd 0:0:1:0: [sg0] tag#7472 CDB[c0]: 00 00 00 00 00 00 00 00 [ 498.025295][ C0] sd 0:0:1:0: [sg0] tag#7473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.035936][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB: Test Unit Ready [ 498.042642][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.052505][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.062379][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.072242][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.082107][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.092092][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.101985][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.111883][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.121747][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.131617][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.141483][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.153189][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.163086][ C0] sd 0:0:1:0: [sg0] tag#7473 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:23 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 498.779343][ C0] sd 0:0:1:0: [sg0] tag#7474 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.790016][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB: Test Unit Ready [ 498.796680][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.806592][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.816467][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.826381][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.836248][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.846114][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.855987][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.865894][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.875786][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.885742][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.895654][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.905574][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.915485][ C0] sd 0:0:1:0: [sg0] tag#7474 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:23 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:24 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xd, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x6}}, 0x94, 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000180)=""/75) open(0x0, 0x0, 0x0) [ 499.926496][ C1] scsi_io_completion_action: 3 callbacks suppressed [ 499.926648][ C1] sd 0:0:1:0: [sg0] tag#7478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.945301][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB: Test Unit Ready [ 499.952039][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.962409][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.972320][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.982221][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.992092][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.001957][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.011972][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.021876][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.031777][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.041694][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.051594][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.061441][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.071276][ C1] sd 0:0:1:0: [sg0] tag#7478 CDB[c0]: 00 00 00 00 00 00 00 00 [ 500.094819][ C1] sd 0:0:1:0: [sg0] tag#7479 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.105539][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB: Test Unit Ready [ 500.112307][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.122169][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.132013][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.141869][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.151724][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.161568][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.171426][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.181271][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.191129][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.200971][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.210822][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.220659][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.230490][ C1] sd 0:0:1:0: [sg0] tag#7479 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 500.722226][ C0] sd 0:0:1:0: [sg0] tag#7480 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.732975][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB: Test Unit Ready [ 500.739776][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.749714][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.759630][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.769595][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.779540][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.789456][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.799370][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.809285][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:25 executing program 1 (fault-call:0 fault-nth:0): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 500.819192][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.828964][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.838877][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.848757][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.858626][ C0] sd 0:0:1:0: [sg0] tag#7480 CDB[c0]: 00 00 00 00 00 00 00 00 [ 501.119731][T10414] FAULT_INJECTION: forcing a failure. [ 501.119731][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 501.133274][T10414] CPU: 0 PID: 10414 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 501.142022][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.152143][T10414] Call Trace: [ 501.155653][T10414] dump_stack+0x21c/0x280 [ 501.160179][T10414] should_fail+0x8b7/0x9e0 [ 501.164733][T10414] should_fail_usercopy+0x39/0x40 [ 501.169915][T10414] _copy_to_user+0x64/0x2b0 [ 501.174710][T10414] __se_sys_semctl+0x3d6/0x6d0 [ 501.179604][T10414] __x64_sys_semctl+0x56/0x70 [ 501.184445][T10414] do_syscall_64+0xad/0x160 [ 501.189084][T10414] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.195047][T10414] RIP: 0033:0x45d5b9 [ 501.198987][T10414] Code: Bad RIP value. [ 501.203117][T10414] RSP: 002b:00007fa0e83bcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 501.211668][T10414] RAX: ffffffffffffffda RBX: 0000000000027780 RCX: 000000000045d5b9 [ 501.219711][T10414] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.227769][T10414] RBP: 00007fa0e83bcca0 R08: 0000000000000000 R09: 0000000000000000 [ 501.235821][T10414] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 501.245869][T10414] R13: 000000000169fb6f R14: 00007fa0e83bd9c0 R15: 000000000118cf4c 20:52:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:26 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:26 executing program 1 (fault-call:0 fault-nth:1): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 502.172424][T10424] FAULT_INJECTION: forcing a failure. [ 502.172424][T10424] name failslab, interval 1, probability 0, space 0, times 1 [ 502.185570][T10424] CPU: 0 PID: 10424 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 502.194322][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.204446][T10424] Call Trace: [ 502.207843][T10424] dump_stack+0x21c/0x280 [ 502.212292][T10424] should_fail+0x8b7/0x9e0 [ 502.216886][T10424] __should_failslab+0x1f6/0x290 [ 502.222074][T10424] should_failslab+0x29/0x70 [ 502.226812][T10424] kmem_cache_alloc+0xcf/0xc50 [ 502.231713][T10424] ? __kernel_text_address+0x171/0x2d0 [ 502.237314][T10424] ? __anon_vma_prepare+0xa6/0xb00 [ 502.242542][T10424] __anon_vma_prepare+0xa6/0xb00 [ 502.247588][T10424] ? kmsan_get_metadata+0x116/0x180 [ 502.252931][T10424] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 502.258857][T10424] do_huge_pmd_anonymous_page+0x669/0x1ac0 [ 502.264767][T10424] ? kmsan_get_metadata+0x116/0x180 [ 502.270071][T10424] ? __msan_poison_alloca+0xf0/0x120 [ 502.275457][T10424] ? kmsan_get_metadata+0x116/0x180 [ 502.280767][T10424] handle_mm_fault+0x3d2c/0x4940 [ 502.285924][T10424] do_user_addr_fault+0xe09/0x19d0 [ 502.291179][T10424] __exc_page_fault+0x308/0x450 [ 502.296151][T10424] exc_page_fault+0x45/0x50 [ 502.300748][T10424] asm_exc_page_fault+0x1e/0x30 [ 502.305844][T10424] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 502.312536][T10424] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 502.332220][T10424] RSP: 0018:ffff8881cb833d68 EFLAGS: 00010206 [ 502.338375][T10424] RAX: ffff8881cb833d70 RBX: ffff88811a0509d8 RCX: 0000000000000068 [ 502.346429][T10424] RDX: 0000000000000068 RSI: ffff8881cb833e60 RDI: 00000000200000c0 [ 502.354499][T10424] RBP: ffff8881cb833df8 R08: ffffea000000000f R09: ffff88812fffa000 [ 502.362552][T10424] R10: 0000000000000002 R11: ffff88811a050000 R12: 0000000000000000 [ 502.370602][T10424] R13: ffff8881cb833e60 R14: 0000000000000068 R15: 0000000000000000 [ 502.378702][T10424] ? _copy_to_user+0x203/0x2b0 [ 502.383588][T10424] __se_sys_semctl+0x3d6/0x6d0 [ 502.388473][T10424] __x64_sys_semctl+0x56/0x70 [ 502.393260][T10424] do_syscall_64+0xad/0x160 [ 502.397869][T10424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.403831][T10424] RIP: 0033:0x45d5b9 [ 502.407773][T10424] Code: Bad RIP value. [ 502.411913][T10424] RSP: 002b:00007fa0e83bcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 502.420447][T10424] RAX: ffffffffffffffda RBX: 0000000000027780 RCX: 000000000045d5b9 [ 502.428506][T10424] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.436574][T10424] RBP: 00007fa0e83bcca0 R08: 0000000000000000 R09: 0000000000000000 [ 502.444625][T10424] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 502.452682][T10424] R13: 000000000169fb6f R14: 00007fa0e83bd9c0 R15: 000000000118cf4c 20:52:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={r3, 0x0, 0x3, 0xaa, 0x4, 0x47, 0x7fe00, 0x800, 0x9, 0x8001, 0x43e8, 0xf42}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) open(0x0, 0x0, 0x196) 20:52:27 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000280)={0x0, &(0x7f0000000180)="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", 0xfc}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0xfff, 0xfffffffa, 0xd69], 0x4, 0x101, 0x730eb8d2, 0x5, 0x1, 0x3, 0x5, {0x3, 0x1000, 0xafc2, 0x4, 0x5767, 0x325, 0x3e03, 0x2, 0x551, 0xc516, 0x7, 0x1, 0x7, 0x1000, "d0647a35ea23236182a980c23037f8969d44c53c5ee68ba731fd85841688c912"}}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x1) 20:52:28 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:28 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:29 executing program 1: semctl$IPC_STAT(0x0, 0x2, 0x2, &(0x7f00000000c0)=""/140) 20:52:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000001c0)=0x8, 0x4) pidfd_send_signal(r2, 0xe, &(0x7f0000000240)={0x1c, 0x5, 0x1}, 0x0) open(0x0, 0x0, 0x0) 20:52:29 executing program 1: semctl$IPC_STAT(0x0, 0x2000, 0x2, &(0x7f00000000c0)=""/140) 20:52:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:30 executing program 1: semctl$IPC_STAT(0x0, 0x3f00, 0x2, &(0x7f00000000c0)=""/140) 20:52:30 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x5}, {0x3f, 0xff, 0x7f, 0x80}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = open(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x80000001, 0x5, 0x5, 0x5, 0x5, 0x6, 0x800, 0x4]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r5, r4, 0x0) getdents(r4, &(0x7f0000000240)=""/4096, 0x1000) ioctl$CHAR_RAW_BSZGET(r4, 0x80081270, &(0x7f0000001200)) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c6226152ae035ec093106aa6db708b45", 0x0, 0x0, {0x2be, 0x6}, {0x5, 0x9}, 0x7, [0x200, 0x7ff, 0x3f, 0x100000001, 0x9, 0x6, 0x1, 0x8, 0x7, 0x2, 0x81, 0x5d, 0x2, 0x4, 0x0, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000001c0)={{r3}, r6, 0x4, @unused=[0x2301, 0x5, 0xfffffffffffffff7, 0x7f], @name="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"}) [ 505.722946][ C0] sd 0:0:1:0: [sg0] tag#7428 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.733807][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB: Test Unit Ready [ 505.740604][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.750492][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.760363][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.770291][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.780169][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.790040][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.799890][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.809770][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.819658][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.829536][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.839394][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.849294][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.859144][ C0] sd 0:0:1:0: [sg0] tag#7428 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:30 executing program 1: semctl$IPC_STAT(0x0, 0x4000, 0x2, &(0x7f00000000c0)=""/140) [ 506.162499][T10469] x_tables: unsorted underflow at hook 2 [ 506.216143][T10470] x_tables: unsorted underflow at hook 2 20:52:31 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x8, 0x2, 0x1, 0x1}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x0, 0x7, [0x7, 0x3db0, 0x9, 0x95df, 0x0, 0x0, 0x80]}, &(0x7f0000000140)=0x16) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x0, 0x4, 0x7fff}) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) 20:52:31 executing program 2: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:31 executing program 1: semctl$IPC_STAT(0x0, 0x18100, 0x2, &(0x7f00000000c0)=""/140) 20:52:31 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 507.067070][ C0] sd 0:0:1:0: [sg0] tag#7429 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 507.077973][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB: Test Unit Ready [ 507.084759][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.094718][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.104617][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.114562][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.124456][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.134329][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.144198][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.154057][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:31 executing program 2: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 507.163906][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.173901][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.183782][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.193657][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.203527][ C0] sd 0:0:1:0: [sg0] tag#7429 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:32 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:32 executing program 1: semctl$IPC_STAT(0x0, 0x20000, 0x2, &(0x7f00000000c0)=""/140) 20:52:32 executing program 2: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 20:52:32 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 507.588249][ C0] sd 0:0:1:0: [sg0] tag#7430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 507.599068][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB: Test Unit Ready [ 507.605732][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.615603][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.625479][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.635349][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.645209][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.655117][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.664997][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.674868][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x4) [ 507.684745][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.694596][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.704496][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.714385][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.724350][ C0] sd 0:0:1:0: [sg0] tag#7430 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:32 executing program 2: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 20:52:32 executing program 1: semctl$IPC_STAT(0x0, 0x200000, 0x2, &(0x7f00000000c0)=""/140) 20:52:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 508.356165][ C1] sd 0:0:1:0: [sg0] tag#7432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.366915][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB: Test Unit Ready [ 508.373731][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.383686][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.393557][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.403443][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.413352][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.423228][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.433108][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.444130][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.453240][ C0] sd 0:0:1:0: [sg0] tag#7431 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.453974][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.464391][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB: Test Unit Ready [ 508.475928][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.482503][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.492206][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.501898][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.511594][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.521295][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.530991][ C1] sd 0:0:1:0: [sg0] tag#7432 CDB[c0]: 00 00 00 00 00 00 00 00 [ 508.540678][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.557936][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.567803][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.577669][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.587544][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.597411][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:33 executing program 1: semctl$IPC_STAT(0x0, 0x810100, 0x2, &(0x7f00000000c0)=""/140) [ 508.607297][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.617151][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.627030][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.636871][ C0] sd 0:0:1:0: [sg0] tag#7431 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x7fffffff, 0x1}) [ 510.407216][T10524] IPVS: ftp: loaded support on port[0] = 21 [ 511.005851][T10524] chnl_net:caif_netlink_parms(): no params data found [ 511.223405][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.231637][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.241161][T10524] device bridge_slave_0 entered promiscuous mode [ 511.336696][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.344012][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.401925][T10524] device bridge_slave_1 entered promiscuous mode [ 511.536138][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.596999][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.726117][T10524] team0: Port device team_slave_0 added [ 511.792136][T10524] team0: Port device team_slave_1 added [ 511.875984][T10524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.883581][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.909663][T10524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.930154][T10524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.937213][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.965352][T10524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.085362][T10524] device hsr_slave_0 entered promiscuous mode [ 512.099561][T10524] device hsr_slave_1 entered promiscuous mode [ 512.112356][T10524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.120080][T10524] Cannot create hsr debugfs directory [ 512.341744][ T4598] Bluetooth: hci4: command 0x0409 tx timeout [ 512.615403][T10524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 512.652021][T10524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 512.672877][T10524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 512.708405][T10524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.078411][T10524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.180902][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 513.190096][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.211730][T10524] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.258755][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 513.268694][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.279544][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.286773][ T4598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.349714][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.359267][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.369127][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.378517][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.385838][ T4598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.394850][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 513.405795][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 513.416550][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 513.427017][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 513.451306][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 513.461073][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 513.471571][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 513.498138][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 513.507900][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.556191][T10524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.569849][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 513.579615][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.589553][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.696118][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.703964][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.741940][T10524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.797316][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.808119][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.874719][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 513.884434][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.910270][T10524] device veth0_vlan entered promiscuous mode [ 513.923672][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.932793][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.974946][T10524] device veth1_vlan entered promiscuous mode [ 514.004533][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 514.093154][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 514.103307][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 514.129419][T10524] device veth0_macvtap entered promiscuous mode [ 514.150942][T10524] device veth1_macvtap entered promiscuous mode [ 514.210143][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.220710][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.230877][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.241469][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.251489][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.264203][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.274237][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 514.284919][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.299028][T10524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.308662][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 514.318254][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 514.327751][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.338513][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.404974][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.419044][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.429068][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.439663][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.442328][ T4598] Bluetooth: hci4: command 0x041b tx timeout [ 514.449705][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.466224][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.476366][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 514.486971][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.502218][T10524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.521990][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 514.532194][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:52:39 executing program 4 (fault-call:0 fault-nth:0): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:39 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:39 executing program 1: semctl$IPC_STAT(0x0, 0x3f000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfe7f, 0xfc, 0xf1, 0x49cf4af2}, {0x4d, 0x3f, 0x0, 0x7f}, {0x6, 0xb, 0x1, 0x50000}]}) r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d, 0x0, 0x0, 0x100}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) [ 515.331520][ C0] sd 0:0:1:0: [sg0] tag#7433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 515.342289][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB: Test Unit Ready [ 515.349121][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.358993][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.368978][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.378770][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.388671][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.398559][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.408439][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.418304][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.428173][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.438156][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.448027][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.457948][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.467811][ C0] sd 0:0:1:0: [sg0] tag#7433 CDB[c0]: 00 00 00 00 00 00 00 00 [ 515.508294][T10749] FAULT_INJECTION: forcing a failure. [ 515.508294][T10749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.521693][T10749] CPU: 0 PID: 10749 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 515.530440][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.540554][T10749] Call Trace: [ 515.543956][T10749] dump_stack+0x21c/0x280 [ 515.548402][T10749] should_fail+0x8b7/0x9e0 [ 515.552944][T10749] should_fail_usercopy+0x39/0x40 [ 515.558066][T10749] _copy_to_user+0x64/0x2b0 [ 515.562694][T10749] __se_sys_semctl+0x3d6/0x6d0 [ 515.567600][T10749] __x64_sys_semctl+0x56/0x70 [ 515.572382][T10749] do_syscall_64+0xad/0x160 [ 515.576986][T10749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.582946][T10749] RIP: 0033:0x45d5b9 [ 515.586882][T10749] Code: Bad RIP value. [ 515.591017][T10749] RSP: 002b:00007fd6b4b6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 515.599519][T10749] RAX: ffffffffffffffda RBX: 0000000000027780 RCX: 000000000045d5b9 [ 515.607584][T10749] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.615628][T10749] RBP: 00007fd6b4b6aca0 R08: 0000000000000000 R09: 0000000000000000 [ 515.623671][T10749] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 515.631719][T10749] R13: 000000000169fb6f R14: 00007fd6b4b6b9c0 R15: 000000000118cf4c 20:52:40 executing program 1: semctl$IPC_STAT(0x0, 0x40000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:40 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:40 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x2a0000, 0x0) 20:52:40 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:41 executing program 1: semctl$IPC_STAT(0x0, 0x5f5a91e6, 0x2, &(0x7f00000000c0)=""/140) 20:52:41 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 516.499212][ T4598] Bluetooth: hci4: command 0x040f tx timeout 20:52:41 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:41 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = open(0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x100, 0x1000, 0x6, 0x4, 0xa28}, 0x14) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VT_WAITACTIVE(r1, 0x5607) 20:52:41 executing program 1: semctl$IPC_STAT(0x0, 0xe6915a5f, 0x2, &(0x7f00000000c0)=""/140) 20:52:42 executing program 2 (fault-call:1 fault-nth:0): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:52:42 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:42 executing program 4: semctl$IPC_STAT(0x0, 0x2, 0x2, &(0x7f00000000c0)=""/140) 20:52:42 executing program 1: semctl$IPC_STAT(0x0, 0x2000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:42 executing program 0: setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "68127b200ee13ebd844321c829a6653e"}, 0x11, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self\x00', 0xd00c2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001240)='/dev/hwrng\x00', 0x40800, 0x0) r2 = dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000180)=0x5000) r3 = memfd_create(&(0x7f0000000140)='security.evm\x00', 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r5, r4, 0x0) getdents(r4, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001300), &(0x7f0000001340)=0x4) r6 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) tee(r3, 0xffffffffffffffff, 0x0, 0x2) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/nvme-fabrics\x00', 0x80, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r7, 0x40285107) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x10000, 0x0) 20:52:42 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:42 executing program 4: semctl$IPC_STAT(0x0, 0x2000, 0x2, &(0x7f00000000c0)=""/140) 20:52:42 executing program 1: semctl$IPC_STAT(0x0, 0x20000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:43 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0xc4, 0xff}, {0x4d}, {0x86, 0x0, 0x0, 0x50100}]}) open(0x0, 0x0, 0x0) 20:52:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) [ 518.580115][ T9074] Bluetooth: hci4: command 0x0419 tx timeout 20:52:43 executing program 4: semctl$IPC_STAT(0x0, 0x3f00, 0x2, &(0x7f00000000c0)=""/140) 20:52:43 executing program 1: semctl$IPC_STAT(0x0, 0x81010000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:43 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1a}, {0x4d}, {0x6, 0x0, 0x2, 0x1}]}) open(0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="b0dd4c998fb9babe4ea20fd21050b40cf7ac1ce4d7242a362c0815f5003fa2df5c536af2a9ac8cad8e5ee8bcc349ed5f34c8cacb5175d26e76ef2b6bc9097062688670f121139e9aa930d10c9d5fd0b60fbb96368e2eb0005979429805f4a584e847690e653a84991d624c89bc2d6f2dfd5aa13b8589366de52b3c2c060384aa9ddd15a91ec969ab870593c6b6ab0877cd036abacda3ebb555f82d0831e769b7580eaf5d94d91b145c6f432920ffe7b53c92596a198500", 0xb7, 0x0) 20:52:43 executing program 1: semctl$IPC_STAT(0x0, 0x3f00000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:43 executing program 4: semctl$IPC_STAT(0x0, 0x4000, 0x2, &(0x7f00000000c0)=""/140) 20:52:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0xff0f, 0x0) [ 519.353180][ T29] audit: type=1326 audit(1599771164.087:14): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10814 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:52:44 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:44 executing program 1: semctl$IPC_STAT(0x0, 0x4000000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:44 executing program 4: semctl$IPC_STAT(0x0, 0x18100, 0x2, &(0x7f00000000c0)=""/140) 20:52:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0xff0f0000, 0x0) 20:52:44 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:44 executing program 1: semctl$IPC_STAT(0x0, 0x8000000000000000, 0x2, &(0x7f00000000c0)=""/140) [ 520.126559][ T29] audit: type=1326 audit(1599771164.857:15): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10814 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:52:45 executing program 4: semctl$IPC_STAT(0x0, 0x20000, 0x2, &(0x7f00000000c0)=""/140) 20:52:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0xff0f000000000000, 0x0) 20:52:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x2, 0xfc, 0x0, 0x50000}]}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) open(0x0, 0x0, 0x0) 20:52:45 executing program 1: semctl$IPC_STAT(0x0, 0xe6915a5f00000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:45 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:45 executing program 4: semctl$IPC_STAT(0x0, 0x200000, 0x2, &(0x7f00000000c0)=""/140) 20:52:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0xff0f) 20:52:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d, 0x0, 0x0, 0xfffffffe}, {0x6, 0x0, 0x0, 0xfffeffff}]}) r0 = open(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1ac, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x40}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfe01}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0xc}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x1c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) 20:52:45 executing program 1: semctl$IPC_STAT(0x0, 0xffffffff00000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:45 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 521.246140][ T29] audit: type=1326 audit(1599771165.977:16): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10855 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0xfffe0000 20:52:46 executing program 4: semctl$IPC_STAT(0x0, 0x810100, 0x2, &(0x7f00000000c0)=""/140) 20:52:46 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x3, &(0x7f00000000c0)=""/140) 20:52:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0xff0f0000) 20:52:46 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:46 executing program 4: semctl$IPC_STAT(0x0, 0x3f000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:46 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x4, &(0x7f00000000c0)=""/140) [ 522.017971][ T29] audit: type=1326 audit(1599771166.747:17): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10855 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0xfffe0000 20:52:46 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x884}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6000000000000, 0x480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000140)={0x3, 0x200, 0x6}) getpeername$l2tp(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) open(0x0, 0x0, 0x0) 20:52:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0xff0f000000000000) 20:52:47 executing program 4: semctl$IPC_STAT(0x0, 0x40000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:47 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0xb, &(0x7f00000000c0)=""/140) 20:52:47 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) open(0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7ff, 0x62100) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) 20:52:47 executing program 4: semctl$IPC_STAT(0x0, 0x2000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x1ff, 0x14, [0x1000, 0x5, 0xa428, 0xffffff65, 0x1f]}) 20:52:47 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0xc, &(0x7f00000000c0)=""/140) 20:52:48 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:48 executing program 4: semctl$IPC_STAT(0x0, 0x20000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:48 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/140) 20:52:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) open(0x0, 0x0, 0x0) 20:52:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x3}, {0x7, 0x0, 0xbb}, {0x6, 0x1, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) 20:52:48 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:48 executing program 4: semctl$IPC_STAT(0x0, 0x81010000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:48 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0xe, &(0x7f00000000c0)=""/140) 20:52:49 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:49 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2c8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x229c}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4840}, 0x4088) 20:52:49 executing program 4: semctl$IPC_STAT(0x0, 0x3f00000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:49 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0xf, &(0x7f00000000c0)=""/140) 20:52:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x80000) 20:52:49 executing program 4: semctl$IPC_STAT(0x0, 0x4000000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:49 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:49 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x10, &(0x7f00000000c0)=""/140) 20:52:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) prctl$PR_SET_ENDIAN(0x14, 0x2) open(0x0, 0x0, 0x0) 20:52:50 executing program 4: semctl$IPC_STAT(0x0, 0x8000000000000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:50 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:50 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x11, &(0x7f00000000c0)=""/140) 20:52:50 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000000c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) 20:52:50 executing program 4: semctl$IPC_STAT(0x0, 0xffffffff00000000, 0x2, &(0x7f00000000c0)=""/140) 20:52:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x4fffc}]}) open(0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x1, 0x1ff}, {0x0, 0x7fff}]}, 0x14, 0x3) 20:52:50 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x12, &(0x7f00000000c0)=""/140) [ 526.235848][ T29] audit: type=1326 audit(1599771170.967:18): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10957 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x40000 20:52:51 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x3, &(0x7f00000000c0)=""/140) 20:52:51 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:51 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x3, 0x3, 0x81, 0x401, 0x7, 0xa451, 0x7, 0x800, 0x1], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r1 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="080e017f00000000ff010000000000001200000000000001000000000000000000000600008500000000000000000000000000020c004d177cd98edd7cc00000000000010000000000000000000000000000000100dfffffff000000000000000000000100000000000000000000ffffe00000010cfdb23fbc4cc6683f7aaaf8df0c41d1785d68bf04000506000930d19181bff36dc99f6f5942ab1ce439d3f12cbd46"], 0x78) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:52:51 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/140) 20:52:51 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x4, &(0x7f00000000c0)=""/140) 20:52:51 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 527.016250][ T29] audit: type=1326 audit(1599771171.747:19): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10957 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x40000 20:52:52 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x14, &(0x7f00000000c0)=""/140) 20:52:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x400) socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:52:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1}, &(0x7f00000000c0)=0x8) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) vmsplice(r3, &(0x7f00000015c0)=[{&(0x7f0000000180)="1c4c4617772d5417f90b90cacef381750ca9e654c031b00461d4f90f3617ba3c", 0x20}, {&(0x7f0000001240)="b5e7f2d843881ca4221f434900f6bc18bf3b97f273b0bbee9f29cc0a8c54194b6275a1b7613e2d160055d6f6d4afc01199355e1acd5f808c87f89f19b4540ec6b06959bb1c38d59d66b76e53d179c2f288da82d8611980414b97ad7609b7e0301dc872c264169f1d8b48eae7942277154a1db09bcc9b49", 0x77}, {&(0x7f00000001c0)}, {&(0x7f00000012c0)="89bb92821ab4af131b9b6f4c136c97a6015f257cd876a8ecee581bfac93b2f08cf893eaf25980c81d7d438c07f418cf4bb89332677a89f598f6be1001ca9a8aba7498aadc5749803887d8c82fb55246da151e4c34f56eae5de64492a551b6ca1a49ff546fb6e0aa478b1ca009605ba67cc09bb622a15588e55e43a4e95a8b8e4074138fd53370fbf7a31659366c8e388b07e66e9001edb357b35e571c5a00b5be79c5d8525adb79ba4b43ab5afce89ebe819d3c92501c4a3acd31077b774f17fb6fdd586637dec6e07f8ba33e8c692a6538ed1178c85b27ae6dfb2644c211ed271851aa854007698ebaf5ecf4a04d736116b30236a0f023bdf", 0xf9}, {&(0x7f00000013c0)="3f5d304077dbbdd2debd61810520630dcbadd4a2153715ed10a6ac0a93cade02c9fe101c7dc4d1842607499183349a829764655d50c77afec5b5e2daf20fb5bbea9a90f9fc567b346db5bac20e797860facd796d54760ae07118f88fe0bd18ec2e8f11111585ec1328cea78292fe2ead133f94712b35af41c0648229229986b236ca2c16547e7aa0204b153306b9f4d3221a9210a64e7eff0adf4e844bc572c2f46cf798c3e7c06406ebcddb448132ea3f2a3073a1e2d88607fc88cbd5056d742a07efa5372f314bf67a19bdae3c9edf6b39e9fd299c5196b714824e420007f14ba303e81ccb", 0xe6}, {&(0x7f00000014c0)="65c93a978b01d2a89522", 0xa}, {&(0x7f0000001500)="44563f46742654d94f889b55902c4f5dcea6c421704068f51d11bd3631df018975f330f88bc00292a85bade46229b1dbe77f46cbc3e4e0303196711dcf89df6f4dab07ff686312c57f32300d6e1c3d81e543708719f97a109afea6d22fb27111a098e40982560cc558e9009bc70328e6f82594212c142b50092c58c53513713b02c58ad1ba95daadf9f7", 0x8a}], 0x7, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r2, 0x20, 0x2}, 0x8) open(0x0, 0x0, 0x0) 20:52:52 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0xb, &(0x7f00000000c0)=""/140) 20:52:52 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 527.589247][T10987] x_tables: unsorted underflow at hook 2 20:52:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$TCFLSH(r2, 0x540b, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x2, 0x50000}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0xd0) open(0x0, 0x0, 0x0) 20:52:52 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0xc, &(0x7f00000000c0)=""/140) 20:52:52 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:53 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x4040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x3000002, 0x810, r1, 0x82000000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x1, 0x4) open(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000100)={0x9, 0x1, 0x812e, @random="453d5ee6ae68", 'tunl0\x00'}) 20:52:53 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x341881, 0x0) 20:52:53 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/140) 20:52:53 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}, {0x7fff, 0x20, 0x1, 0x8}, {0x80, 0x4, 0x9, 0x100}]}) open(0x0, 0x0, 0x0) 20:52:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x783c1, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/125) 20:52:53 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0xe, &(0x7f00000000c0)=""/140) 20:52:53 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) dup3(r1, r2, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VT_WAITACTIVE(r0, 0x5607) 20:52:54 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400040, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x183800, 0x44, 0x10}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000021c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x3f, 0x1010, 0x7, 0x1, 0x6, 0x7}}, 0x50) 20:52:54 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x200, 0x3326}) 20:52:54 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0xf, &(0x7f00000000c0)=""/140) 20:52:54 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:54 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x10, &(0x7f00000000c0)=""/140) 20:52:54 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/140) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x2, 0x0, 0x1}) 20:52:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) open_by_handle_at(r1, &(0x7f00000000c0)={0x1008, 0x400, "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"}, 0x20200) 20:52:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x9, 0x81f}, 0x2}, 0x20, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000340)=""/60, 0x3c}], 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) 20:52:55 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 530.255359][T11046] x_tables: unsorted underflow at hook 2 [ 530.313207][T11046] x_tables: unsorted underflow at hook 2 [ 530.363870][T11049] x_tables: unsorted underflow at hook 2 20:52:55 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x11, &(0x7f00000000c0)=""/140) 20:52:55 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/121) 20:52:55 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 20:52:55 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x12, &(0x7f00000000c0)=""/140) 20:52:56 executing program 1: semget(0x1, 0x2, 0x610) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0xc025, 0x3}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/149) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 20:52:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x40, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x48800) 20:52:56 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:56 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/140) 20:52:56 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x10200, 0x0) 20:52:56 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:56 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x14, &(0x7f00000000c0)=""/140) 20:52:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4807c0, 0x0) open(0x0, 0x0, 0x0) 20:52:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x48000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000000c0)={0x7}) open(0x0, 0x0, 0x0) 20:52:57 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:57 executing program 1: connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x3, 0x1, 0x697, 0x2}, 0x0, 0x8, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0xcf6, 0x2, 0x6c}) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00f82abd7000fbdbdf250e00000048000380080001000100000008000500e000000106000400ff7f00000600040000800000140001000000000000000000000000000000000008000100020000000800030004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x121800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000002c0)={0x1, 0x2, 0x2}) 20:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x2, 0x50000}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0xd0) open(0x0, 0x0, 0x0) 20:52:57 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 20:52:57 executing program 0: ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000000)={0x8, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) open(0x0, 0x0, 0x0) 20:52:57 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:52:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0xfff}, {0x4d, 0x0, 0x2}, {0x3, 0x0, 0x81, 0x50000}]}) open(0x0, 0x0, 0x0) 20:52:57 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x9200000000000000, 0x0, 0x20, 0xf, 0xe}) 20:52:58 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x480000, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) setregid(0xee00, r4) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/167) 20:52:58 executing program 0: ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0xc6, &(0x7f0000000080)="5d695be6b15dacd6941444fd28ca4ec38841b12bbaeee3feeecb9a491dc85dbca414c081a183435dcf8df0a51f79299a1acfe8f0f76d328ce61b786881f30c61dca18307c25eced179f3c568336f5c34639c906c119892c6ca2a7d3ce176a5c7a628d7f0a9aed5667ba7559c6f2f47b806527d28183fa172763a27289c0822f358cd4560f0f2e417f41fb5de6d8b44721db56608421669231f254d36487b66d6682f2dd53c21b4ff333647e98b8c3b49c9a9c9401a7e18671e77659e5329ad691ea8904854a2"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000001500)=""/4096, 0x1000) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000001280)={0x4, &(0x7f0000001240)=[0x1, 0x8, 0x3fe0000, 0xffff]}) msgsnd(0x0, &(0x7f0000001300)={0x3, "fa20cc089050cc12ece6b59e7226a238549f5a2e5da5910e5a88f45b773328b7867aa74f38bb5f3ec88f575bae4a7cc8cc85fb110a9eba6b8ddc56f60f54a03465c4790f4bbf9b89ae50762f85f30d3311d7f69d89ba761410d7e94689c2e803c21bb80f2697d61b7abe0a496b086fe2cf15ad21a7f867f47fe4a108eb87dc4dec8d77678c4de9d7d268c8eaeb977c062c57c62c6ea0e3b63a6089e9834d84a2784452c2c0b1cce98f6115213f4f6cbcc0250465"}, 0xbc, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001400)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @rand_addr=0x64010101}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000050}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r6, r5, 0x0) getdents(r5, &(0x7f0000000240)=""/4096, 0x1000) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000001c0)={0x2, 0x8}) open(0x0, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000012c0)={0x8, 0x1f}) 20:52:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x9) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0xc47) [ 533.579067][ C1] sd 0:0:1:0: [sg0] tag#7445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 533.589776][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB: Test Unit Ready [ 533.596446][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.606392][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.616281][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.626247][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.636231][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.646140][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.655995][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.665849][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:52:58 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 533.675709][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.685558][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.695387][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.705217][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.715056][ C1] sd 0:0:1:0: [sg0] tag#7445 CDB[c0]: 00 00 00 00 00 00 00 00 20:52:58 executing program 4: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=""/156) 20:52:58 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 534.324790][ C1] sd 0:0:1:0: [sg0] tag#7446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 534.335487][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB: Test Unit Ready [ 534.342249][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.352096][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.362008][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.371843][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.381682][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.391521][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.401392][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.411225][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.421055][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.430880][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.440706][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.450540][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.460393][ C1] sd 0:0:1:0: [sg0] tag#7446 CDB[c0]: 00 00 00 00 00 00 00 00 [ 535.938872][T11153] IPVS: ftp: loaded support on port[0] = 21 [ 536.235261][T11153] chnl_net:caif_netlink_parms(): no params data found [ 536.330612][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.337767][T11153] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.347404][T11153] device bridge_slave_0 entered promiscuous mode [ 536.360148][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.367283][T11153] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.377618][T11153] device bridge_slave_1 entered promiscuous mode [ 536.418075][T11153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.437256][T11153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.475656][T11153] team0: Port device team_slave_0 added [ 536.485358][T11153] team0: Port device team_slave_1 added [ 536.519411][T11153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.526438][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.552711][T11153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.572462][T11153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.579899][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.606076][T11153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.655643][T11153] device hsr_slave_0 entered promiscuous mode [ 536.678274][T11153] device hsr_slave_1 entered promiscuous mode [ 536.686518][T11153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.699126][T11153] Cannot create hsr debugfs directory [ 536.897087][T11153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 536.919592][T11153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 536.937211][T11153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 536.955866][T11153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 537.055214][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.062628][T11153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.070673][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.077838][T11153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.183440][T11153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.209868][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.226087][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.235757][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.249973][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 537.272343][T11153] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.288947][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.299190][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.308022][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.315309][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.336456][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.347031][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.356707][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.364120][T10164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.383373][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.410743][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.422241][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.433126][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.452117][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.465595][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 537.475014][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.501525][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.510498][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.530895][T11153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.543259][T11153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 537.555665][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 537.565508][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.608278][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.615972][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.643787][T11153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.681842][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.691217][T10164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.740928][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.750747][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.767784][T11153] device veth0_vlan entered promiscuous mode [ 537.776518][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.778921][T10164] Bluetooth: hci5: command 0x0409 tx timeout [ 537.786088][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.812919][T11153] device veth1_vlan entered promiscuous mode [ 537.866793][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 537.875545][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 537.885228][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 537.894650][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 537.915873][T11153] device veth0_macvtap entered promiscuous mode [ 537.939739][T11153] device veth1_macvtap entered promiscuous mode [ 537.980624][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 537.991832][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.001824][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.012462][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.022494][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.033135][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.043360][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.053983][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.064046][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.074657][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.087185][T11153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.097515][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 538.106629][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 538.116089][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 538.126142][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 538.150123][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.161405][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.171498][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.182135][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.192142][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.202846][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.212857][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.223506][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.233648][T11153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.244276][T11153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.256835][T11153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.268716][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.279053][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:53:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x2, 0x50000}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0xd0) open(0x0, 0x0, 0x0) 20:53:03 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/140) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) 20:53:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2000, 0x0) r1 = shmget(0x1, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f00003fe000/0xc00000)=nil, 0x1000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="080000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000010000000900000002004e24ac1e020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e236401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000a71f0cfbba81dbbc3b5f6d3d1987329fc94e4e99db960fcaf47d377ab7cd617a8291c3ce57429799bdc4f6e48b6983ea8bef451138b73c98de28f6a37c"], 0x510) 20:53:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x400400, 0x44) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xfd, "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"}, &(0x7f0000000000)=0x105) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000280)=0x10) 20:53:03 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0x7) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttynull\x00', 0x40, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000280)={0x3, 0x9, 0x2, 0x5, 0x3, [0x8, 0x8, 0x1, 0xd9]}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf242500000008000100706359001e000200303030303a30303a31302e300000657464657673696d000000000002006e657464657673696d30000008008c0000000000080001007063690011000200303030303a30303a31302e300047559b15008b00"/122, @ANYRES32=r0, @ANYBLOB="b1d61a321d7797fd59c53e3ebe034d17c6c8ca5597be302ed66c98c4b0b60d46a1868507277d6eb1e8a53f46e44695cf2642f1254454d1658f5ee71c0404397b236441257c8c5cec4d54441d1a9dea4ac7d1d619337ba49ce1b51944ca179885653002e370b9024dab336ed365582fca97adfbec36c88a23b7ee0fd541a3a1a46b35cd85bee96c09475321069e9f79dca6df06672c12055450cd270bd5feb5bdbcfc2481f2"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:03 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:03 executing program 1: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x180800) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x40, 0xffffffffffffffff}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:03 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) recvmsg$qrtr(r0, &(0x7f0000000980)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/120, 0x78}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/204, 0xcc}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f0000000580)=""/51, 0x33}], 0xa, &(0x7f0000000680)=[{0x38, 0x0, 0x0, ""/34}, {0xf0, 0x0, 0x0, ""/220}, {0xe0, 0x0, 0x0, ""/206}, {0xe8, 0x0, 0x0, ""/214}], 0x2f0, 0x2043}, 0x38, 0x40000020) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001240)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000001280)={0xfff, 0x7, 0x1, 0x3, 0x3, [0x7, 0x8, 0x7f, 0x26a7]}) 20:53:03 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x2, 0x50000}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0xd0) open(0x0, 0x0, 0x0) 20:53:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x10, 0x1, 0x1}, 0x6}}, 0x18) 20:53:04 executing program 1: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x80000001, 0x1001, 0x8, 0x1, 0x5, "c4101b334f0e860300ab8729955f35fe4af400"}) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000080)={0x6, 0x3, 0x5}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) 20:53:04 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:04 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/156) [ 539.861909][ T4598] Bluetooth: hci5: command 0x041b tx timeout [ 540.082864][T11404] x_tables: unsorted underflow at hook 2 [ 540.160835][T11408] x_tables: unsorted underflow at hook 2 20:53:05 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7a}, {0x4d, 0xa2, 0x3}, {0x6, 0x0, 0x1, 0x50000}]}) open(0x0, 0x0, 0x186) 20:53:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x2, 0x50000}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0xd0) 20:53:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d, 0x0, 0x7}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x23) 20:53:05 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) getegid() 20:53:05 executing program 4: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_GET_KEEPCAPS(0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) 20:53:05 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) gettid() 20:53:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "77e58aa462f2ce16329607db2f1405579b1ac15239a2633857ccbcf55fd2235c", 0x64737664}) shutdown(0xffffffffffffffff, 0x1) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x5959, 0x2) setsockopt$inet_dccp_int(r2, 0x21, 0x5, &(0x7f0000000040)=0x6, 0x4) 20:53:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x2, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6b, 0xa80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r8) 20:53:06 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/140) 20:53:06 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d}, {0x3f, 0x0, 0x0, 0x50000}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f00000000c0)={0x0, 0x100, 0x7, 0xb43, 0x6, 0x2, 0x2, 0x8, 0x6, 0x1, 0x3, 0x2}) open(0x0, 0x0, 0x0) 20:53:06 executing program 5: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:06 executing program 1: semget(0x0, 0x3, 0x380) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000100)=[{0x3, 0x71c0, 0x1800}, {0x3, 0x2, 0x1000}, {0x2, 0xc, 0x800}, {0x3, 0x8000, 0x1000}, {0x3, 0x80, 0x1000}, {0x3, 0x5, 0x800}, {0x5, 0x400, 0x1800}, {0x0, 0xfffa, 0x1000}, {0x4, 0x9, 0x800}, {0x5, 0x3, 0xb87b333a04adabc7}], 0xa) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000180), 0x4) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x200, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/142) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001280)={0x5, &(0x7f0000001240)=[{0x6, 0x9, 0x0, 0x8001}, {0x9, 0x20, 0x1, 0x7}, {0xfff8, 0x3, 0x2, 0x7}, {0x9, 0x5, 0x0, 0xc532}, {0x401, 0x2d, 0x2}]}, 0x10) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000280)={0x0, 0x3}) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040), 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f00000001c0)=""/192) [ 541.940273][ T8711] Bluetooth: hci5: command 0x040f tx timeout 20:53:06 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0x3, 0x8}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = fsmount(r0, 0x1, 0xf1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48014}, 0x800) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002480)='/dev/null\x00', 0x102, 0x0) read$char_usb(r4, &(0x7f00000024c0)=""/117, 0x75) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000002340)={0x1, 0x0, [{}]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r6, 0x6}}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000022c0)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x7, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000012c0)=""/4096}, &(0x7f0000000080)=0x78) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002540)='nv\x00', 0x3) [ 542.028294][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:06 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x4d, 0x0, 0x8e}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:07 executing program 5: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0x1, 0x1f, 0x3, 0x0, 0x7f, 0x0, 0xe6, 0x1f, 0x3, 0x1, 0x9, 0x8001}, {0x5, 0xacb, 0x7f, 0x2, 0x1f, 0x0, 0xc1, 0x2, 0x4, 0x3, 0x1, 0x3, 0x3}, {0xc641, 0x20, 0x9, 0x8, 0x8d, 0x6, 0x7, 0x6, 0x3, 0x3, 0x2, 0xff, 0xfffffffffffffff9}], 0x4a6}) [ 542.446592][T11471] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 542.446592][T11471] The task syz-executor.1 (11471) triggered the difference, watch for misbehavior. 20:53:07 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:07 executing program 4: r0 = syz_io_uring_complete(0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1f, 0x9, 0x10000}, &(0x7f0000000040)=0x10) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x718e, 0x1, 0x0, 0x6, 0xfff, 0x65, 0x3, 0x0, r1}, 0x20) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:07 executing program 0: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6, &(0x7f0000002000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "428226355d0ee06b7c037189aeaee7a5546bf80788a1f2b83b60959ece63fd46a7e5ab07eb162441494b8e7e0d9b6662bfcbbacdab43b2159ad64af1e76d516795a380f99c420b8e0b5da52b09e5a859"}, 0xd8) 20:53:07 executing program 5: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:07 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x16, 0x0, &(0x7f0000000100)) 20:53:08 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/29) 20:53:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x8, 0x0, 0x5, 0x50000}]}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) timer_delete(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r4, 0xfff}, &(0x7f00000001c0)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r6, r5, 0x0) getdents(r5, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x3, 0x0, [{0x4, 0x5, 0x9, 0xffffffff, 0x8, 0x1, 0x9bb}, {0x80000008, 0x1, 0x5, 0x8, 0x5, 0x4, 0x3}, {0x4, 0x7ff, 0x6, 0x4, 0x4, 0x1, 0x7b8}]}) 20:53:08 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/127) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='#/]{-(#/\x00') 20:53:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x2, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:08 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:08 executing program 0: r0 = socket(0x2a, 0x2, 0x0) close(r0) [ 543.868843][ T4598] Bluetooth: hci0: command 0x0406 tx timeout 20:53:08 executing program 2: semget$private(0x0, 0x1, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000000)=0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) [ 544.019309][ T4598] Bluetooth: hci5: command 0x0419 tx timeout 20:53:08 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x9, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) 20:53:09 executing program 2: shmget(0x1, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) syz_io_uring_setup(0x87, &(0x7f00000013c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x2}, 0x0) r2 = syz_io_uring_complete(r0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=0x7ff, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0x0) dup2(r3, r4) ioctl$KDMKTONE(r2, 0x4b30, 0x2db) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r6 = open(0x0, 0x0, 0xc) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) 20:53:09 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r3, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0xffffffffffffff47}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x380}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000084) 20:53:09 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:09 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000845}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000008c000a0000", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', 0x0, 0x13, 0x0, 0x50, 0x401, 0x75, @mcast1, @mcast1, 0x80, 0x1, 0x80000000, 0x2}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001340)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf25170000006400018008000300020000001400020076657468305f746f5f626f6e64000000140002006e657470636930000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000300044ea74808000300030000007c000180140002006d61637365633000000000000000000008000300010000001400020000000000000000000000000000000000080003000300000008000300010000001400020076657468305f746f5f626174616476001400020068737230000000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="34000180140002006d6163767461703000000000000000001400020300657468305f6d61637674617000000008000000000700000005018008000100b2d78dca1a3cd433e07d9cd13c2453a6fbf5f25871da110611ee02000000000000002300e25b5af8c45a9925977b689d6acd80a60e6b899a3bdfc608203978d7867808a526c449e767cb9b527891", @ANYRES32=r11, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x1}, 0xc001) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000000)) 20:53:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xffffffffffffff9b, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x28}}, 0x0) [ 545.008011][ T29] audit: type=1326 audit(1599771189.737:20): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11533 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:53:09 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 545.077603][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 545.204894][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 20:53:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) [ 545.268753][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:53:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x84, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4e15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbc}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6887}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x4009000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xff}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xd7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x40088) sendmsg$rds(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000400)=""/87, 0x57}], 0x5, &(0x7f0000000680)=[@rdma_dest={0x18, 0x114, 0x2, {0x8000, 0x200}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/13, 0xd}, &(0x7f0000000540), 0x2}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0xfff}, &(0x7f0000000580)=0x1, &(0x7f00000005c0)=0x100000001, 0x1, 0x8001, 0x80000001, 0x6, 0x0, 0x2}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x9}, &(0x7f0000000600)=0x1ff, &(0x7f0000000640)=0x10000ffff, 0xe2, 0xc5, 0x5, 0x1f, 0x8, 0x6}}], 0x110, 0x20000000}, 0x40004) r1 = open(&(0x7f0000000940)='./file0\x00', 0x4000, 0x112) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000009c0)={0x3, &(0x7f0000000980)=[{0xf67, 0x0, 0x40, 0x41}, {0x0, 0x2, 0x3, 0x7}, {0x8, 0x3, 0x6, 0xef41}]}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000c00)={@any, 0x3ff}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008}, 0x4810) 20:53:10 executing program 0: r0 = socket(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 20:53:10 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:10 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 545.736409][ T29] audit: type=1326 audit(1599771190.467:21): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11533 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:53:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) open(0x0, 0x0, 0x0) 20:53:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:10 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xbc, 0x2, 0x8, "dd77fa23c37d463907c8dffabd16d31a", "bc904605ee309ac7e8c7a0f0f8ed457cfd0d3d041d288faf959b77ee019d85d3d8096f8ec8b16f346f1cfbca5610a0647040ce5bf74b74f01c13646d8ef510630665c0c6da15465dc98af8e0ef04d072d7f5bb33066f7ddb822b0d75a5925e74425b146207963983a4a1e6a4f1c42be1efb2ee0dd2600f5b72d9f0b432e1bada39a95557d414dd9d6dca356d18a55aa5b05f7832440182115b7e2e10ead0e5dea5beff15206fef"}, 0xbc, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xe}}}, 0x24}}, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$CHAR_RAW_IOOPT(r0, 0x1279, &(0x7f0000000080)) 20:53:10 executing program 0: write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f00000001c0), 0x25) 20:53:10 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:10 executing program 4: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=""/126) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x32, @multicast1, 0x4e24, 0x0, 'sh\x00', 0x22, 0x3, 0x2a}, 0x2c) 20:53:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) [ 546.515732][T11589] x_tables: unsorted underflow at hook 2 20:53:11 executing program 0: r0 = socket(0x29, 0x80002, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) sendmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "49651baedae846f7"}, 0x10}}, 0x0) 20:53:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 546.569744][T11589] x_tables: unsorted underflow at hook 2 20:53:11 executing program 2: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x8000) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0xffffffff}, 0x4) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x5, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) 20:53:11 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:11 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x404201, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xa) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x5, 0x9, 0x6, 0x0, 0xb, "b9681e6f0e7c210e"}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 20:53:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:11 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x10f, 0x82, 0x0, 0x0) 20:53:11 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000001540)={0x0, 0x5}) r1 = semget(0x1, 0x1, 0x208) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000380)=""/4096) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xfffff6a8}, &(0x7f0000000200)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="1c933be17e45471f56b2", 0xa}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0xcab, 0x9, 0xaccc, 0x401}}, @init={0x18, 0x84, 0x0, {0xfffb, 0x7, 0xfff6, 0x4}}, @authinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8004, 0x6, 0x3, r2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x5dc6, 0x8200, 0x0, 0x4, 0x7, 0x100, 0x3, r2}}], 0xe8, 0x4000000}, 0x20000894) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000001580)=""/4096) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0xffff8000, 0x4) pselect6(0x40, &(0x7f0000001380)={0x5, 0xffffffff, 0xffff, 0x100, 0x8001, 0xc0c, 0xbef, 0x7ff}, &(0x7f00000013c0)={0xa74, 0x1f, 0xffff, 0x8, 0x100, 0x4, 0x100, 0x1f}, &(0x7f0000001400)={0x5, 0x325, 0x0, 0xfffffffffffffffc, 0x4, 0x1, 0x1f, 0x1}, &(0x7f0000001440)={0x77359400}, &(0x7f00000014c0)={&(0x7f0000001480)={[0x7]}, 0x8}) 20:53:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:12 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x47, 0x7, 0x0, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7800, 0x8, 0x5, 0x7fff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r10, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="6b2e343c4163c8bd880a1b3c1970db40384321875eaba3e8637be7b5b38133933bff4f2d3e1564332df58db3cddb0e333a61f728c34b4324421e79ff10114872002261ced58654d6420e72ce55a3981705ade86609dff5e9c094a902ee785d28e15d4f978cc8d887200ed1ce7a958e366030944bb7fe24e147304f3e14909f1f3644cf5902b349883381fa86166ecee29748be04b1dbf0055ce90ec5ffac2bed40fe9c438918", 0xa6}], 0x1, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3079}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}}}}], 0x88}}, {{&(0x7f0000000380)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000640)=[{&(0x7f00000003c0)="ee0fafd161963ef6ebeaf18304db8208a3940eac7091182aa37711b1a7e58104b0b920a0dfef20a4e11ab9400c6cdd9f4bb9001923971eb637a2856c2d97b4f9f3524391b310d9b99e149d511ec9e1c26668a9276033072479aad0d9605543e9c5f44406448b8ccf3ce16933a5129ec8", 0x70}, {&(0x7f0000000440)="5a12d89bf966848d47889774dd1d6beaf73d8ead4564c77208041e03bd6d272aedc9127d1fc6360858e9b5656dcebc9416091dba6df8bde6a56e088ae2cc9420dca1c08b2949949592739473c96ccb9ccf712d0d14574113b7eb6605733bc5ca0a7a29cc8fecac24001be947bfccb268dcc7cb6cfc132f6376630587e30eeea7ab04fe3586689de2", 0x88}, {&(0x7f0000000500)="2b16fd152a9c1e912eae1558fe683d3839eed493b0ee90e60c1353b98a41b8adbc340a6a6ad24006919b553e8cd1a46ebb92a356244ed51b30836d9fa3c35c48864e7b8cf2433aaaf6c95a1f060053e34a352c878e43e0e04eef1ed24192ded296bcd09aa30a1e88f652679decef526065543138f4666712601223132477a574684261a6383543", 0x87}, {&(0x7f00000005c0)="ef4f4421f08b85ec3b464c4747d51b751dece881d9d298994ba3875b8215c97b44a77e39a827caf60ceef3d8e662206eb681f168a0f51ef8b0ae2c689ba671671a4ff17fa138941ff4590c9a6cb4b725fe78a92952ce5f4ae9285f0a9c30d3a140d4b7c25f15fa3c3408e1ca7f719fb3d76b5c633c36a2f98df9", 0x7a}], 0x4, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000700)="661b95945062caf7a1245312b89ec8968f5fff260a1135e81a88a85e4bac7e32b15565f231d07b3bba53ad6b6b91c5543945dc59f0da1ed63ad91056466e61da3a51df46139c37b399ca794e94d4d464150d51d9d35588b7412ddd5330e48214b3fb61c05bcd612f191d74bc72b8a484783f7fd7ff58218fba89bb3d064abb95ff01f5cae88e893a43251480de8eec1190ea50f4376373325d5020b4967b3ebdad2c38093e4036a0d7", 0xa9}, {&(0x7f00000007c0)="79161515b18bde514a291af91ced7181ad47568bcd711416291c195099d8492da078c582c9f9c81febe83adf9771be10cb6bc6186e8dadd627530a6f1f626c7ac1bf228801a75372f91663ffabbced52136fc1d0efd9bccf2966336c230174686f79dc34751884725b1ccec70bd088ca75bd26aba57d07ab2b0847bb50b86ba986d2d79530c77f0211c2ff2a50125116a8a4cab428cc", 0x96}, {&(0x7f0000000880)="d6e6322af463510ff42a95e5a5bcb1861a2dd309d8564bf3038f67086b32a0aeef860b24e0d1a1b0796ad08f3feda5fb06c42a89392375105603dab000cec2b7dfa711ad8dcb4d1cd8e1786599a4ffe97184dca1e01204d33ef34043c8dfb75b4ac38556707497590ae3801f54646e4cb722b18f2730c986049b0251f8d726991f45901708d5f25a80dfefd770f96f983fe69494405682d6c842bb8fb7eca0054e09a896186226b0c08abfc91dba1571cdc4718a6e53eb1cf953427c5ab4eddfaecd89fe246516a5e2cf0bba1739c66b5a39d5adf8b936c7847419697dfa4ef1cdbb829e762deb06ab5f1f399e029a2971de1592390695584568b24cd2506858fc177903eb3b5ad20558dea5ed7b3231c70d3b819148f4e6839e90b17a390d135011cff75cea0ee9bc991ec707923cb1e4d7a094cd3f1c4d2eab1c26f4321f7676417e7d37a48f07d5aa3c208c5abe9dd5b6e2eabde312bb7db31bca45dfb89b20251ea61b2fa6d8a7a3094e94a2b20de30205b334c4a57cdc1e977c8014c03cade63ccf04e3a3812b891441d0cfd77ebaaf001ad246db3d1615dff0cc3be1fd227929baa9c13411c2dad2a5e0ac2404788166f9b6cdf8a1ee7e38eb0226f856a86e9c5d3104cd02310f05cd5babfe17f9a8e9766fa5125efb6d9c7dce2d62e385aad3adf6255aaf8d073d12319ce5372cad53f35d86f957cdc4ceade7742aed34e0fd77feb4c8547bce695a9f454a7fbcfcc235f13e4fca93d548b762bda5996533303df6fab76ec3b813a935ec952ae2181c9f80275fcc0f673e9bceb3be45f9a02858ff77c6ef24c4dce3a5f743e275a09191cf4d4c34d289d209155744958308e0d64e0ff207e61298c086f666d2c9f42ef6fc6623a9680fab75803551a193ef27e684d5751ee7adaed76a260fc700d86f75f27af4f985063915109386b726cb5c8de62062b41e8e7b7995cc245281fe1b09cdae957305031d9b8497086fc8fed7d76e4e2603856f9d8c507073af795afdc38efa8bd19d3461fda581441d5c8abff24c6100923deb450c773ec6a2c9193f140379fc23f14896f5fed2a23440d4446b568337b9e18d8eeb67fde6f8b2a56b6ccbead0c1a8bd4bc40e8c24f84d45fae79a08e431999f905ff02929ffd33ae028f72cc23ce2dc2190a384de63e565b692cd6b2d0b2c2fa1dd9e68dd2f230e32625f94cf0c57d710ae330e4f40f9eea47dcc2a20528cb12fc08548890ba2bf8a721e42f676a676c413fa940ab6e498eb8ae00b50df4386d6b308bde735793483f425a122a4ca03d3a30a8a9c86087e56a7198281c9a4c226c66fce305c6d08b61a70f9dcdf673959c0584d684578a0a4373974863d160e52b23d37a4eb71cdb20b9c13ca02221cec1ea110ac2196b52902a7317cb75ab27631cd7d00ffcd5ca49138279f16a71ddb1247583be81cf2d4e9d6388bbffdc3ee76a223d71ab5a6cefa384e2525381a78901260538e664e039c7098ec02d1ad8ba6700da41ea037bc698cad66e09f351c5e8d530caeaaa6e7d74e51db4f4320ee532d89bb0a1039591319c6c3fbd0fbdc8851c95511102185301627e94bdac131aff37d8e0b3cbc2496bc1bf4b328d469917e2ae1ef3ed3fc806dd6b0b92fb91ff9008fbeedce00386bb140d760478222a566c603e0d5a28d836bec904768a6e7799a4e6c11279a1026f566b6545377cc3b1eb363b3644edf042a6301c2f200fae0b6be203139a696a19e5c1eee4cc284d3e78ed938db98b437e11132b1afd0f35644b1d7acfa062a1c7c9b2b02bd94c786c5533427cb29e98bb19adcbda5229671df6cabbde637fca1976bab90c21a5f730eaa939f198d7e3c495f52aa95d6a7c800860fcde863129197fc6a893632ab3028b52b00a85f2909cb8c3fa4cbe542939c53f6d6c8e9bbeb504b75cd97da15ed26cfbdfbdf55a4af975080a4885ee7448538c108b77b8d511ae7e991082585403c1876db5137a4bf9fa14c8d53b8345abba72ab5291ffcf3ad2f139296514ac37edff3a452859305d7df4b048fe85fc10d44f627ee0705ec173bf8e71e78551a87e98e6600cc18dc5015b9430582375183a8bf0673efc1fd4620daa739b613f474c17504ca253076acee3c617522758c91cec4536c5f8ddad803b5fdb58373fde0e138e02b50ad449efe65cfc4e35b3654f5b0a22f82445a848e7943f6ffe2efbf47b1235d8b6f36151ea8c29f15cc9cabb396046dcb991a50146274c781f548d9ada7a6821166bac314b3c43cad6478ad28b5f85d4cf162316aa3e7c1a7f78aecd83b12c99cd39123db0a72918650b811fdea73a2ae4fddfebc76b8be01eef9a4d9c62756ba18fee907e9ba3f94cbf64de03616120ea1306c0581ecc36f16c1aec855d45c11f64a45897e57b285a4774c39e904ddac99adcc9adb1bff6c71b18a6355064874381b140186d2a85028499816f5cb232462d4f845c9e1186e14b57c6597feda6f6f2ed4f6da096059b0138433ae44050290e2b6844e83e398c7dc5394af99f6f9e2f8c6694a1ea49cfc0d4b4df35f7a3b77a2ab5552b846901f7aeab8a915f00e866ebe85506c43f1df99aedf79ebc9f42c0d93330cf48423e8b42b85eb719d22027a2c82c61245bbd83afab15aa1acad2de255ee167059033329cce250812147d7a3fc0d28490a5719d7f698952249c63d6afccf6ccd8df0fa5f62a49d040020ea993d50670c8f65caef80b4a6ae8b694cb0fa539020edebc5f3ab78e1de763c176cbdacaa4dd10503b315a49e1ebe17fd4795ba561631c872ca470a35c959825b30fd4c3f6479e6b0f6e94c6b0d82d6c55303fd928ff82e9064620ef14602c7e3017545d31c994dc8d05da61bc11dd6631c5de889705bab1c2ef377d701ca980868c20289de6c425ad52049bb9da1fbe6fa34bf506996fab784f7dab4f32b9218c8b76499573b7ee1a322aabf1c04b20ccd8f992d892257e5535a23e34310fa6ad9fccf958217fab07982f0d858d12afcdb7de1807b95b8b9b81b329186f25af1cce1bbbdda54b53a881f7c84800366a25c3176501e48ed47d81fa8bcf3adb9fd5388a5920be2598da512f8a90acf993b3aada0c42e8d84aea39d275a28c0f1230fc4ad18cccd5163731c61703f2b679e48d761936bf5c890f08c51b668ba91a921239f2de79c828084c8327ed777a96059ed7405fe6568e054cfaf73c2c89ad4ae5aecb8d123c325dd4598250455a3f85007f731968cb00f7698b37b77d31420a8a6dc3f3cf5ff236967dc7bb5ad6345d4039e1d884addf3e43876500412d917fafbba91f9b9be44509aeca5d8188e67110d8145b1c650345e09baa8998c74e0e1c369a38de2d26b69860968e846a1dd215e4b53781adfd6040e328acf52b323c344c800241792c604060e910cc269fc9d223373046b742f2440c992758f8ad560e281e2940f2786f5b7989385e7dac690869599172fca0eb92afe6a462cd21467bd73b209ea65bea855f7c906d5eed478feda1e71d0007b30556ce29286030b9b55ffaa9ec30ea086882173002ff8fca5f18f6dbad797e1e32865367ef862429da95580946430586008755efe2b144bce02eb0da5bce9b7d15526779b406d10b5fcb145029c8f64241b37d1398fd05bb663fcf2710468ca6a739da6d437099443204202976ffbd4dc30a483d2dad72d1af78d4a89284923a65f8b33a79ffc8fdd57e09ddfff8f209104247bc56ff0903eca4dd9fe38ff015ee05e0a32814e09a024e729c0bb74b4f64dc9cf2bca38ad57829531961ecf16bedfba02bd9fdb32b401bb8baf824d1752cfffe696279b5764fa0f0b05ecf57be1189bdca38052b4c2601b18b111e04491a903563b7129ae91493def48c2a31edadbe77ebc61c7bbb534bbb573270a899aaddaede6f8295f3c11a61ef38b0ae6bf2e441521b92c4b854a839b4f14643cf4dcd1700618349cef3d6e840d1913d3f588629e1ff04e240f7c1ab8dbf7205cd432c666a203deb5e716901d3acb2c7ff075d29f8bcb38f27e5690e48ff385ed939cf2751e7d986282b7254168004f4fa48ca4664b6dae868707af5f6e4d4d27683e8490894a984c97d58877298f0e06b8447f9b4fd98f99361a0989cffd5c68683b5c13b896c7220c3e4270749eae59ed6d9ecee105e133a812148fea55631fb1ab84921a4b07ec3f36476d5200b6ab210c7799720a087d1bcd9d9ceed7575e01ea818422445e74130db4943290e8e452c333d2a8ee95ecf25a496107da89a724e86cf340255e64dde9a8c021e7572fc9643f507c70ce8a41bef43b2e1b12009e57c2cafcfc80bcd21be49bca1a221d66f246189cd82c9c5963f0786e73d7bb28ed5269740ec5c722ea9a8c88dc7250b1411558eda60f790be7c12ee1496bb30711e9d2ce84c7dee30dc34abb26d56915f8d2706e80bf350cd738baa59858b0581aeaa39260b87d897214551c57051e7d8fb620d0f65a4d48481a8b14b8f33221ef16b92b203546fc330d7b8e38c8c6dc06e2304bc12b0a434f40dadf6f728b8a92f070a8b932fc2b365c9eb73478097e3dde2b3216dbe44320d3266ce22048b045883d08629b464768a79bd5edd8b63f60f5b406704efe98fa36754fa745df311c925e9ce19cec6e878ce080d6f14787dfea2a931b571266987557426effa9fec94ad57718c7328450caf9272396f3193a33664b4eb1421dee3396acab5eb3c76a49828ac586bee69753393b1192b1960f6b0eca3bc97afbdea00eb393650dfd8c2efb5116054c8bb206b4b9ec2f2be24c270b8cfbcf4d2866a8125e2063ca45e768d889a21caf737b5c45d3b86c4d38bab80a93e084c8faa32aef4d3db3da5143f55824afac4264d86555564038e3a8f38fa1846312b39c8d179d6e14255b63ce7b00aee324adc26991a9da2ebe17182ff93bde5740b903db96cbeb055be14802cd6876ca6372b9cc98fcb67ae8d98d30e1d71798fbd26151f27799315541f29b73ad4acd925b3cda6aab13fe01334ccfea74647e1445ff83167736e3f6a2f20b7205759a089748ad05c757f91a20b57662bce08095e20021edb8d17f8298dd9abe56aaa9c3c44fd2826627958fb076fa3cf1711fb2791930f95a13c4b9b69a0303ac34289fa664a39fc1f50ac22e713ddcaa6b1fa0470a80ed34d0cbecce83a41623070cb7a2680d01732c813ecabc8b0005b1b63f761364f4cab9ab74953b8a242c1858a7a7b29530b3cbbf8d651b669ce2fe3329b7292507479ec2f340f592c65e254c41f5c15fd7d3c3447d3b54363fe9806e193185fa23364133de163103d28b9b97d5c92c1830b222f123d870fe239d5ed118acbbd457acb5a9ad0ac9a3e90cf74cdef8066ecc80b061f83147d4ccbe6f75d8d5aa7db4491a868a8cc63c40922e967b3f7b5c21ceabafed74dfd137a41c517f4cb81cd471a97841ca663eb36b1f7cc7dd4ba8bdc3a5aa36c1f8d34ec4c6f9a75bbe8647d20e6d74c1cd0859d9d30d0c2101a5117a31050b4096852d97c88c3b053fdafbe130f5b4c1f8bb1354c233522598d579145867bf0508b70a6172b84ed5909ba3ae1e8b340534050e8bcb3875250e679d2fdb4b5d0ba5a698ef68e1d3a38653a3e44631cd8bf14a61edf8047fb4692fdac033ceeed58c1c9d5359f5996a5b697236f3260ec223bd0fc88b9d1d8dace140f7efae8017d1e90d656c2060cf6c56087defd6cb741c6557484c0a137c852129aeedee8d56fe58456e7009007a851d0b3b95d6bd5bffc3d47aa293239a3f3b268e78d99da2bbbf781fea", 0x1000}, {&(0x7f0000001880)="1b12270dd307903577ac39ad6f7fc4381850198aec9251cefa4715ca031b4f282f3d1f56f5faec285d6c8099925954e43529315bd00fa0c091b77dbd57e8520ba4181c475e27a7fe4b088aa331d02384b345a252db4a156a375b78f3d458165246868d4b94daff9d9fc60db50b357c9ea71301ca43ae3caa0070f77faa7e", 0x7e}, {&(0x7f0000001900)="07c2b1f49502f70fa953cc1807883846251498ef08603fc9cdf5cd0d994c8a345664ab8c1f9c717aa340a45f119701785ddd9eb732f1cb4e24c3c17fca1431f1a1acfaa26443bca2f61625be14c812649d09d43d7d", 0x55}], 0x5, &(0x7f0000001a00)}}, {{&(0x7f0000001a40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a80)="ffc1da5df0cf80121112923eac55e8bbc5a894627268c157efcfa58d4a13b7bf377b964bc44afef7e000349a4a977f872c7f0d70fdce34999c1b72e4540d17e2135597fbbecfb8ed2c34fc292bf00f6a2fff61ea734be15a9b66fdd24aab54d227ce67c5e6c8f64b9c87cf83aca6f5b01ddca088b64bcb1c147ba8ebc697709b3661fa044932f5ca9cf870ee8bd3aeb2913b25eee60f37b76f09b35a4acb8cb79fb3336781f3b600d5997d3d401b58540dc7", 0xb2}, {&(0x7f0000001b40)="458da3ca58fadc", 0x7}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)="5fae6bbc124b24a5288505b35daee7289d1b0cfc2aec3825d15caf8ef9f4f022988fd188450070e8633ae67e0791b74e6508814f050a092c313ca5415bfb2a2b6d7d4d9b965fb6bb9f85181060541c5b2b4c94e4f68ed535cfa10738f20649728ad55a6216426ec1b9b2f3b734178fa4d29fc9b420c96cfc668be297a29204b1a1361eeabdc2ef9b73b752c517175c9873a33753a576492cf7d1a4cd8433046e3b8779eb247ffd572675f2341aa45142e08fd3bad08681133309311c26b9e9362dba13a3de1ceb0fc3beb5cab2bfc4659f1a5b3f2de1f2fa64f1881e2c0297c6645649b61f", 0xe5}], 0x4, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000000000000200000005000000000000003c00000000cdae000000ed5b70d95778302c59083515d56b40000721b4f45d040100891b7a7f0000010000000aac1414bbe90000027f0000017f000001440c62"], 0x58}}, {{&(0x7f0000001d80)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001dc0)="c51d48f87f91b607fe868fcafe747aa070586549d2fa260ab2dba7855f82d129dabb33d0315fe02a7722f85694b808eb4c17e75a235a9262870307383a1336cf", 0x40}], 0x1, &(0x7f0000001e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xfb, [@dev={0xac, 0x14, 0x14, 0x19}, @local]}, @generic={0x89, 0x4, "6ba3"}, @rr={0x7, 0x1b, 0x88, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, @remote, @rand_addr=0x64010102]}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x7, 0xdb, [@loopback]}, @lsrr={0x83, 0x13, 0xce, [@dev={0xac, 0x14, 0x14, 0x10}, @loopback, @private=0xa010101, @remote]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xcb, [@private=0xa010100, @private=0xa010102]}, @generic={0x7, 0xf, "15717d22ae1e071a6f4a93e094"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x158}}, {{&(0x7f0000001fc0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000002040)=[{&(0x7f0000002000)="0920f3b0c4041538500d2b8009215c7bf329d0cae4be14fd3643624b9e4ee043824b90fcc3", 0x25}], 0x1, &(0x7f0000002080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x38}}], 0x6, 0x809) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000002240)={0x2, 0x0, 0x6, 0x9, 0x8, 0x4}) 20:53:12 executing program 4: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x10000) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x1ff, 0x0, [], {0x0, @bt={0xfffffff7, 0x8000, 0x0, 0x2, 0xec2d, 0xc7, 0x5, 0x1, 0x2, 0x9, 0x9, 0x400, 0x6aa, 0x400000, 0x1, 0x22, {0x5}, 0x3f, 0x9}}}) 20:53:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) close(r0) 20:53:12 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2080, 0x0) init_module(&(0x7f0000000000)='}.\x00', 0x3, &(0x7f0000000040)='!\x00') semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000280)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x140a, 0x1, 0x70bf25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0xfffffffffffffef5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x48084}, 0x10) 20:53:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:12 executing program 0: r0 = socket(0x2, 0xa, 0x0) bind$rxrpc(r0, 0x0, 0x0) 20:53:13 executing program 4: semget$private(0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x7}) [ 548.334740][T11636] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 20:53:13 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:13 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/186) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xc68, 0x80, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r7, r6, 0x0) getdents(r6, &(0x7f0000000240)=""/4096, 0x1000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f7400038014000380100001800400030008000100"/62], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="400000007457005b402fb29c2aac5e6e592512979a28ca29cabbea8ccab872bf7869af7901f17efe30a01ca0a66aa210ae9546bfb700b220110961f2bdc202d43e3850cee1e33c7b4f4f38709216de8aa1a2f19a1fbfe546e9b92285d85c", @ANYRESOCT=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000000000004000100"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c3f62aaf3238d70}, 0x8805) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x18}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000001340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x57ffa3d2d1682e8a}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="ec0050f6593840361937d88110de18b9b1711118b80bb8b9a82d7458892324423c370b66ecaa84ca43f806680446deff0c2ecc60aa1bd0ce861693c0d35900bd966b16a76772b65e2d8451b122a50865b76c8b0d263f8b908a0073642e069090260b8b201d4593489f30672dfc0f25c9dd5f3151210178f3fc41cad81aeeeca7aa5cb3e0f46ca5c55a9fc113007658a94e763efb4f1f8039108a7d23", @ANYRES16=r5, @ANYBLOB="00032bbd7000fcdbdf250900000044000580140002800800040000000000080001000f000000080001007564700007000100696200001c0002800800030002000000080004000200000008000200d20b0000940006803e0003002e59541abfd232de4d50b748c4a9aab1556b222514e647f4903d372d71b98bc2a8ebb35f42e3164a5ef39e440be2e958a1574081db4087c6d0c100004300040067636d28616573290000000000000000000000000000000000000000000000001b0000003d8b508b94f41d4a9283cf57f420d31a7f95d217aa583efaa61a6700080001003f00000004000200"], 0xec}, 0x1, 0x0, 0x0, 0x48014}, 0x1) 20:53:13 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) [ 548.932101][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:53:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:13 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x0, 0x0, 0x2, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) [ 549.067884][T11654] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:53:14 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc050565d, &(0x7f0000000200)={0x0, 0x2}) 20:53:14 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'nr0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000d00)={0x1d, r1}, 0x10) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2, 0x3}, 0x10) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r2, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r2, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000240)=""/140) 20:53:14 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:14 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000180)={0x0, 0xa240cdb54bb164c0, "c7aabcb585d4446b751f6d7cf2e30fadc93854a08a608e6b0977ed50be1e6c69", 0x88, 0xed32, 0x5, 0x4, 0x7, 0x2, 0x1, 0x3, [0xfff, 0xb6, 0x5, 0x7]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0x100000001]}, 0x8) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000012c0)={&(0x7f0000001280)=[0x3b], 0x1, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000001300)=@gcm_128={{}, "db6b417919449f01", "7002ac0dd3d6da86896125fb2147e631", "23cecdf3", "d885a6a0e207c6cc"}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000001240)={0x0, 'veth1_vlan\x00', {0x4}, 0x8cb}) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={[], 0xff, 0x10001, 0x8000, 0x2, 0x7}) 20:53:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x0, 0x0, 0x2, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x24240, 0x0) open(0x0, 0x0, 0x0) 20:53:14 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') [ 549.873364][T11674] x_tables: unsorted underflow at hook 2 [ 549.991268][T11674] x_tables: unsorted underflow at hook 2 20:53:14 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:15 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r1 = syz_open_dev$vcsn(&(0x7f0000001640)='/dev/vcs#\x00', 0x1, 0xc0400) recvmsg$can_bcm(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001680)=""/43, 0x2b}, {&(0x7f00000016c0)=""/2, 0x2}, {&(0x7f0000001700)}, {&(0x7f0000001740)=""/170, 0xaa}, {&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/89, 0x59}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/42, 0x2a}, {&(0x7f00000019c0)=""/186, 0xba}], 0xa, &(0x7f0000001b40)=""/100, 0x64}, 0x40001102) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10080, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r2, &(0x7f0000002240)=""/4097, 0x1001) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 20:53:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x0, 0x0, 0x2, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:15 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x200008c4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:53:15 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0xf9700000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:15 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:15 executing program 1: setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='.&+\x00', 0x4) r0 = semget(0x2, 0x1, 0x20) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/139) semget(0x3, 0x2, 0x76) 20:53:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socket$nl_generic(0x2, 0xa, 0x10) 20:53:15 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001240)={0x26, {{0xa, 0x4e22, 0xfffffff7, @remote, 0x88ff28}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x5800000, @remote, 0x9}}, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x2b}, 0x6}}]}, 0x190) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000080)=[{0x4ef9462ea1039e0d, 0x0, 0x3800}, {0x1, 0x2}, {0xdcd0f8862f27978d, 0xfff8, 0x1800}, {0x1, 0x9, 0x1800}], 0x4) semop(r1, &(0x7f0000000380)=[{0x0, 0xfffb, 0x1000}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000180)=""/138) semop(r1, &(0x7f0000000000)=[{0x2, 0x5, 0x1000}, {0x3, 0x9, 0x800}, {0x1, 0x8001, 0x1400}, {0x3, 0x3b55, 0x800}, {0x4, 0x6, 0x800}, {0x3, 0x1f}], 0x6) 20:53:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x42, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:15 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:16 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) 20:53:16 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) 20:53:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) eventfd(0x7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'sit0\x00', {0x3}, 0x9}) open(0x0, 0x0, 0x0) 20:53:16 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000002340)=""/140) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x7, 0x39, 0x5, 0xb, 0xcc, 0x80000001, 0x1}, 0x9c) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f00000000c0)=0xd5) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x9, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r5, r4, 0x0) getdents(r4, &(0x7f0000000240)=""/4096, 0x1000) openat(r1, &(0x7f0000000040)='./file0/../file0\x00', 0x729040, 0x62) syz_open_dev$vcsa(&(0x7f0000001280)='/dev/vcsa#\x00', 0x0, 0x2cc441) r6 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r7, r6, 0x0) getdents(r6, &(0x7f0000001300)=""/4105, 0x1009) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f00000012c0)={0x100, 0xfffb}) 20:53:16 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqsrc(r0, 0x0, 0xc, 0x0, &(0x7f0000000040)) [ 551.966271][ T29] audit: type=1326 audit(1599771196.697:22): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11727 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:53:17 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:17 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x240, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @local}}, [0x3, 0x3, 0x7fffffff, 0x9, 0x1, 0xa681, 0x626, 0x5, 0xffffffffffffff01, 0x997, 0x0, 0x4, 0x2, 0x9, 0x2]}, &(0x7f0000000040)=0x100) 20:53:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019380)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf2, &(0x7f0000000180)="f7f249b9740c0764ca04f400befbf2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac0000009038396bb68e4053cd0c42727a81b1af4915e96c43607a144f6543b6faf143e648fcbde4967033f51be252a22ea40c9422247185569bdffc58cff1685babdf5c77ac6c0ceb6e4d48ec30cd70a1a381611750c555848886f1e31994b058b3289760d441a0b9777c243bccd3ff8bfc59a323235d9e3bc4442f31a171b45bcfe35bc10298e76c298ef72b6e54366e2e553731707f8cb05543d77ebdc5610da0978c628327d790f3c23122538a5055877082de3a1f25b1c4f44a9b76f530024fdf3eef272e5e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x3, 0x4) open(0x0, 0x0, 0x0) 20:53:17 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x52001, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 20:53:17 executing program 0: r0 = socket(0xa, 0x6, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 20:53:17 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 20:53:17 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) syz_emit_ethernet(0x10e, &(0x7f0000000180)={@dev={[], 0x16}, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "c723", "e7485d", 0x8884, "11879e09da25ab461c4bee38cb50b8580d601a2c846d4c485559c645717eae87f74aea2053dda15f84bb73887d68ad222edd4f81bf7fc3c55e549aafedc5c36ae259d159290bc765d54ef520e71992dc0fcdee83e4c9e85c361f5d85d6db7e462d2ab57d5d6ffa62c0eeeb964fee17916da5676e127b6214c61fae73182935eb091c65a097d9fb2fc9d1dde0955062b460ef846be838828dfed525b59538d7060b20b8d60b1794ad0b7331303710275b89d2e6b52ec052dac2d1441764c3a976d63f26c9eb4b0089d9ee633dfc91e989b7525321857bb5737339861752c7ff63693f688a6ef7fc9aac66723a41541aac0c92b8d51f72df"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0xf93, 0x744, 0x589, 0x5d3]}) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) 20:53:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8101) 20:53:17 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/167) 20:53:18 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 20:53:18 executing program 4: r0 = semget(0x3, 0x0, 0x104) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="b4efa53c439b1cc6dba73c9e137f1251f9032f5d6c7a2d7661cabeb7d34396f017855d5d9ceb868ae097e9a14358c19aa312db001822df14356783c12b5b1c608355989f8a1ffee2d93f03e75746c59b34b10a1c73b9b49bbcdb10ab9ebfa37e9ad7d46b5f5c4a9ff628eb270d3099718fdd3ea7be6b02f495d50b2bd30675a7e00d3e069050529ab2c0") [ 553.410487][ T29] audit: type=1326 audit(1599771198.147:23): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11766 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:53:18 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe4fcf9f0cd5"], 0x14f) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 20:53:18 executing program 4: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x8, 0xd6, 0x40, 0x0, 0x9, 0x7, 0x12, 0x0, 0xff, 0x5}, {0x200, 0x8b5f, 0x4, 0x81, 0x80, 0x0, 0x5a, 0x5, 0xe, 0x81, 0x3, 0x81, 0x8000}, {0x1, 0x2, 0x6, 0x0, 0x7, 0xff, 0x3f, 0x1, 0xcf, 0x1, 0x1, 0x5e, 0xffffffff}], 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000001240)={0x0, 0x0, @pic={0x7, 0x80, 0xfe, 0x3, 0xfb, 0x1, 0x2, 0x5, 0x3, 0x8, 0xff, 0xbe, 0x7f, 0x0, 0x80, 0x40}}) r4 = syz_open_dev$video4linux(&(0x7f0000001480)='/dev/v4l-subdev#\x00', 0x12a1, 0x101080) fsetxattr$security_ima(r4, &(0x7f00000014c0)='security.ima\x00', &(0x7f0000001500)=@ng={0x4, 0xf, "90c0925304b2fa13911d7ca4001c"}, 0x10, 0x1) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x44, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000000000004000100"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000fcdbdf25090000006000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e7230000000000000000000000000000800030000000000080003000000000014000200766574683100000000000000000000001400020076657468305f746f5f68737200000000080003000100000004000180"], 0x78}}, 0x80) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000080)={0x4, "3f986632bd67b3ecc023692a08cf92a9eec9d2df9988e54d42649d1b89021a15", 0x1, 0x1}) [ 554.099520][ T9075] Bluetooth: hci1: command 0x0406 tx timeout 20:53:20 executing program 2: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0xfc, 0x200000000, 0x1}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x5c, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x3, 0x0, 0x100, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x10, 0x80, 0x6, 0x6}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @empty, 0x7fffffff, 0xffff, 0x4, 0x0, 0x80, 0xc0000140, r1}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000340)) open(0x0, 0x0, 0x0) 20:53:20 executing program 0: keyctl$get_persistent(0xb, 0x0, 0xfffffffffffffffa) 20:53:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5, 0x0, 0xff}, {0x6}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:20 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0xf, 'k'}, 0x3, 0x2) 20:53:20 executing program 4: r0 = semget$private(0x0, 0x0, 0x402) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc8c3]}, 0x8) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x8, 0x7fff, &(0x7f0000000040)=0x8}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/125) 20:53:20 executing program 3: r0 = socket(0xa, 0x3, 0xff) bind$l2tp6(r0, 0x0, 0x0) [ 555.764925][ T29] audit: type=1326 audit(1599771200.497:24): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11796 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:53:20 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/153) 20:53:20 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000056ce36b68b0f334d6c37d03057c90000866f55e3376e4a82071d7827af040000001e55b3f31672797fc00300533324f871d94768e25851d3162c1bde856ed69b673e5b8d861ff207c0eb4b60a82fc3c0e2085d6add5893b223f703b454af0805f231eb8474953f640e3d490cdc0448ecf21b205768e34ab95b6ef8810000000000000061a98d7df3768db9bd08468a9924ee64859c23ca56c82b205eca4d90628aeacbd4654eb43749cd85af76d9929b318c989bead2f9921120246508b2ab814b38f9cac8fea1a8c4712b53306c00a649a62720cd661d21ab5d7a8b9f974b4f5da4862c01b4cbe5f279fe779d5f9f366ec0aee3344d712d35edc17c209296c3db7ff279c9bc5ab35699f860fef75f37888d0b0968f5a8fcdf57cc5c62f45fcaccb1a3401d604f41584029f3d5b6d29e971ceaefa933d67349c442906f352af85c053e58699a3d202f82a829a0f6bc5f9f60d595f2840bd24c75b36cced30bebfa3bfb740d62d13e3e2b1146d90634f6f8459814b2bf50a19bbf15723e63777fcaf33303876a4d2cdf0e767a36b72b13ed548784e2a58393626c56e7e4fe8cd92f76158b39bfd836b9eea56315c959271f2d71be9257bbf1de"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 20:53:20 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:20 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5c62e643"}, 0x0, 0x0, @fd}) 20:53:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x3, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0xfffffffc}, {0x4d, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x50000}]}) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001100)=r1) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000000c0)="33c499ab07dc58be8df3c944b3160286cfe68e53343c8998fa7bce098861bb97fb81b67ad143036d3085bc2450facce4486871706e6228600b00aec72893ad8da335a4da4ab8885e10d9a6a72bce3f4081e7605c1ae26b329d5846f68678cd67376a6294f01626b627cd3d0202e312bfba3a133b401e3d9c4eda7ba2ee001c776374294a91d2f0cdbf634b2ca5a2c5c962d84422d3a89b62ff747048cf5ab9f81005f82103067ccbcb12957e418eb1cd15fa607d75eac3dc540f7cb1092d81ca20e1a19ece41c57b9df60946bb149b6ab85a0487749fe5847286280a61a18205105cd478df78d04e94c59b79f94aba3237c47e1a191c15af5aa98f0f189210355671277015bba7636b2d020095acde7a2b626a9f0451597c3b54e5ff353e250ced21f4ad564b410b3817fb5d9b6b70846e602bd6b50ff81dd57b537f5ff9098980fcf3cee220674da1127748afc03adc6a4a5d4b822a1e14fcc19806ae10fbb62f3261b9a0de87f55330aaa39a0030af2c38efbb3110d569f3c0e65d09c12fea351b27c9038e628dc72fd312d15ed90033771615bec1491d30d5e1ce2acec0de805d5145adc1e43eb2dbff4568538f16697c63305e97f4dbc45ded5eb187d9d400be9863b0d122f1bf39d1cd3e08de0097caf55ce0921986cf477a87d1340ea485874d3675e992f4fda88f42650b26f8cbeb9034f3d24180bad1d790ff4745a2cd7a97e8f0f63da9a398a430a4e20616d73abafc6c5f8e1035dadbf9ffd916811fe301cf5a5a5cfde4efb2af0b3f471676547d1bf27d48349f3b138a51741caf56d06237fa857d22c32eedf4549ed9eabcbf5ff263faaed705dcc7c242be9e6ea004f66528dbe9ab08c6054c1cb097ca9dbd8695f529778171213a330555982c30e3b2c1ff347d06efb0e53757d6a67853a78c962b2cee6d8d76f7fba57feb7c36d85261ce462059f7d77c0c9d690e41c6e1ba6b2818f38196f9d285bd36bbc781cb105346844d1ba80260ef41c447940f14fad882ed6d70cc3adcbfce5a7f4175c014862fd05fd9ea1b74202a97fe707ccaaa20de114b91696df15f9d1e0337fec40d943a6f9d0c934f50191eb1155a9d2ef80dd2b3d391b92049ad5e25ad26f778d9883d32db2b073e20960e9a43cedb246b766f40dfce830dfa14518e4458734bcc5d94c2ccddfa3bb40dd40ba65474d5eb7b541035d7cc533d058664d42f5ce43075ae0a5d190408dd5d6f2138cad10ba3fab682572500eec63b8a42bd84ec916adde03734af996c7fd69e75d9078c5cba67d1f8525282423044306160267546766eb69379908005bfa7bbe05b56c69423d48cec5a1d1b8fdd2a1d98203e74279b5a4aaf0e46b2419c6c86eee5e8ff708741631cee41dc8f5f6ab171af7daf36ddfd66e47b35a09f4dad1da75bb3b88bd5d24878ed90aecbea9eeeea757fcdcd1058e2c34ffe6d68b359b22d356db461f46b2b2f4a626a80ae01a0f88516193592a8def5a592ca8aed88b63c2644f1edd5b91b57b9ab7382c6f2cb1c3fc956295be05f0235dc7712505f1f78860f43037fc02fd54387afd2cbb4551aae74ce0cbddb7191bad86f7083e2e88c7bac6a17e09cd53c1b93f4df02dc3686a358add2dbfe55137f3b14b39dd17bd25934d869ad5c5b296cd4ebadf7d04abb2530d8ee94b4ed4e1b16806f3684e3094c1de6d439da69646a7f6c47c802655a4ffc5bbcf94caf759863e321dcfadbb563bdfbfabd9184c1318068ec74a1c21f1a16cbb1328676e122ddf2c1c6b74057e902253ccc0929555209ac989bf32d0923918b0aeda31969d2e4672ad78708fd2b3b6188393870d644e5f740ee70906ef4b639c4b53bf0794bf364ca70efc6e88c952a130d14964c6672cca74abbe2367d9b050573058a7a30a3c6e7a2f189ca8dbc94014a3af1ab939e496871ed7e23af84d45098ba2fcde2d6d6ffebea656a754ba2c719908f442374f8b91ee20795b37225439f1eceb06722d21576107779557f7d18494a3e34e102490ec7ef5fbf2acc7fa5c6421f2707660f9fbbccdcf10f9a06c36ae8c52226e769be74bde9b739a801164ae7e4c77e6f874aa438239e242007ffb7afce069a9951a95c673c99394f4f66d79dc8b971cbede7c213179c27a7738519037ec933a4202206f718a17e5e499bab839ca3e5d20e6b4057d48960e925afdf79907386ed744454f520293b9f63fce384e77f1df72793ad755f7656f427c0061957debb2883c334226075653ccc071174f9118107111a5568623ee93627dbd8bc7d780ade6eb08691dbff495b8aa5592dfd41a90107fdc2241bb39064e6c8bcc3e97a2f4c5784018ce3eb818e813470f88534d7eefee642d51e2edaa55ffafdbb76875cdba49807422db743aba9d8f9a84c74105815996de667e6cf6dd0ff65f51763aeb638db5410e68b65dea6c39fdc7a7ffb9658eda05d4a6463a3bfe2b21f24005a724e8926dabec7f7d2f3e3fd0cc34d42af4cef7bd73995cd12b8fdc332c7358d5c78e4b80dce3dcdff95073a075299dfb41457a7e90064be6433827514e70723521ad76da6b22385bba61efb8eef29d66a0f513f30aa83e7379a208d6746180085e49b356f94798c22a559477dfa7abcadea497a75794a788a7998113bc94b1b2ea0ac0d827186cf7441147ff125505d720946388f8e073baae3c3ddca034227a141f66e5293106ac9289b03ac3c346e9317c774c7747080aba28f490644eca6a39549a2240b9cc9e0aad3ff8835a62a22c34789910cba73d7acf312ea54e0125ac18787ec09176aa3be68b995c2fa3985b523c5b97b5cd707a5c0542e219df3f45076cfa8f3fed689e75f0180d08c232c87c59a9e54144674eb3c2d3c41a44f8bbd13deda9763624db87f3fe35ace9b9cfc34b195feded7d3c200f0ff2a78814972891590a13a0dbf7a7d6a5adb6577ab9dbe109144d7448dba5dcec9948ac228146cb87bc9e4d3369e72be5620b7e3ed6da7af4d0cbb20ffa7bf5cc6462e1edcd0f0409316f8a9c126241caddfaf1e2a99e004e10bd16ff523208d0f65ab3ed2b75d3b58b8caa79fa7c748c54920394e35ee6bcdc8ea0491892fb45a8bf85cf1574ce9d53ddaad4cb3b3034218c6f3b8beeab10562f5d3f0bb83907d00408598d34ad865915616fe7d06210f2cfee21a5783aca39f997b516b7a2ca210f247910ab7b0a9a4fcea583c15b8da63f88cf2db924cedd6cda33683e51a77082c67c8c58f07c85598bfef4ce4e57ab052fd65252bf946c066d1324c1d7457460885d4785044982063bc7e9761dc6a7e260fd93713e65ff405decca22c9c8e5b36d8c535c399ce583ba93870b76a9117d7390e178f44f11197f68b3461a5858bad145cd225b47d8ad9bab607e2c7ae6026e2323477da41f7d45cdc439c3903b5020238010786b605908d16141fae7d383c164d23f68ee6dc9f0141bf342e8ede49a61eea6a5eff46550caaead0acafd447a5463ad2c16320b56526e5c4eecd8e33f49365cb6c238b326914043a74b5cd5db38ede0bd9666dcc01f9c15ad02452539f2310c5d63fb30963a4ed6f2769d77e855e587e7e241925a88ce7851cfdc6099c213b7db7578a9fae4e09836d501e334e2a0f4e201382c9706ce35fcf3a5bc3adbeecac17035d2b0a8f9b06b337527f8d3bf83e09c0f4f86b623feb90fd08721a605006bcd95ecb8ec52ba3ad6d1b7f62608bcf62eee29fb094749df4ac366662f621f56adb5573e4ae0a7445ff54274a109183bab25c61ac7db6f7e1f127e17055bc49087b7b0494d75aaef714692cad9ff71198ca8d4a1d4774e3e94307fb642ab9dc7257cbafd6a0b37e8a4e45c23713c599b76aba6755b46a4796f3ddf32476377b65d85cc9768c4b0172cd7dad5d8e7369ad78f5fb288d35924ad9610c2f6aec1a649231146ba8c009201a458ba2d5127b929f2ab79bedd3a2cab261346fddab4254bcffc6715b40ebc835c4bac25a0bed821a4c5d9069d199016d91a4cc2174e8b4b16a98c7ed72046ffb383ddd0442984fb79dd97d760ac7a8c329991198f2a8e7aebddf50a777f7c5f3f59464f5f29cf492a7010112aa461bb699824827f09298b887a28ffd785a18a4fe34cc87221b3b2a4227a631cc7fcb8b08d9fbc261d61cdb1618e043df9262601737bba769a2a8fc8059d13704f73d534b42f2e36390e0f10637828dffdf75001b40097bb9fece83eec13b0b02580416fc591f09387a174243751d5c9631f6f71abf2658ee11bd5dadb9a5ba28840527d080e55f95f91fb30982113dade40f8315775953607a01403233562bdcef97fe64ebaa8c3f717bd9f5366186be80519ff9077baaaf6ca6747164ed57202fb85669b94d272578100d4db67295a4464fcfcb4433ab2d4e4f227e6b9289484329c14fd861eeca19d802c0007d6ae531307f41aff8691770cd01d3656b382d94f58cfd92b6a073aaf47e3255500b96189639e9e8ad587611a61a81f70f735c47947467abf3b934391f99564cb641377fb61e0b9515f3006b9610d3817b1f2f6f906bd332970bae257b06c80e1ffddbb26458d2ada37db3c67fc391b7cbf72bf38bac677d372b7123d923f7d370457f4758583d476ab08df32c73a4f0f2d45478231dd88a15e2a1f68c38624290ff6920996f547e20dc712ec4adfd27c986209628167e7aa1132fd2d2ccf009d30aaa673eddc09bff6f25f7db36414aebccce54742e931d7db2261545023de8f0385992fd3604c647c190d3f105087544a727ef1fb1dbfbae1fc591e08036ea135393685d6e4df1ae74695db802ba5ced510dafe392b4b18da3ac6b2dccc745c1ac23f5c9ba46bfecc28ef5c441dcc2bf21a5978627deb50a22402bc310b349e48278cb43cdb245b0355183f0bc72d3c2c109e042e0b71c2e079be81953ef2429f317f56286ff38288aa8a2b72308c921ca43f668fddb1ad593104b7e066621b4445144988ae033055947ad4e1c4a9d053cc54bd26032390acc86a9ce438c8433d166b6d93b5593327e854af30d92347994f6a673e4b24661836d5120cbe47fb5c9659696435788f55a12fd56c08e2b14d563ae7e3a37e0a537ea3d391fab5ea682fdc44c8feeba756cc3e373f2bbe3a319bc5eb9cdb6e926ddbbb086fa871ab2f18b36723528354e0e9ac7d213b38d16f0422b66c15af77dede5e537ad391ce3abd25e4edc992f5c3d1052e09f30b59ce1dbdc4c327394e6123b9e0312f74e576367f466516b116037708f4d417b46d22dc5a18c92a613337b4f2a86b1bdf03ea8f239608490af86457868e9edb85b5c56870d815f18b5d89b349c21ea7858d4b7e2da3052e588724ba4b66600fd7594108ce6b80036d3ec39936646a46801de3cbc7c69def6472c0b371cbaa2c407a36241f621ac6dec9fe0a30151bb1cb23154475afe469155c4144aed15b182b076e1bdf142fdc08fb3677eeb214d94fe71931cbb07bb82a290322b17b0dd0f9d32fafa20e22419049c1763501cd6344ce30c3956ce0e4bd6c6970b805d842251a0d387b34df1afca497ee16d94c21c8697c0578008275d5967a3e5c11b78f824e8b100468de2fa17e1825255541d8720edf573d91250f9ba5577e52ca40c873bf57f5387a6424d193126c8510f842c8f9966952310da8454889dd8082d410daa414b57d6cb14351d5332b0a535b13379077f4b50c7c71f04786691f9ddfeac387a7a4e68020e08f0aab37667c71949e2f70cdcd0b46a46e7093ebd8322b9782bc3e71dff5d20fa244fc8f35170a9c6edfabb") ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x80) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000080)={0x88f, "34e92b4c4203d71b06691ef6a47aa5255b7c372e22ed315cfa6fd6bb40070291", 0x0, 0x1}) open(0x0, 0x0, 0x0) 20:53:21 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x48000, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[&(0x7f0000000180)="3c03eae0637a9b2f4a99bc516e69baebd72d46814a3cd0f450ca366fb71aad358a20dda9c89d8473b6d4945180c29eee46a42d0a2935cc9adbaa00857bd2477e9ef8d157674ae2a90237facd458849ba4b059040f70cebc164168fb538272f3cf17f16e485e25b04958ece6c54b647018709c8ac9cc928c262d716e62c30c0d0dfc88ef7e4bdc2e7075b96783e6bd1d131059b52881e5a8e1cbc1f8a29849dca5c99f836150521c17b0fbf1365f2a5e05dc00e95aa142755274eb1f66f3aa298e994fa242957f9d8e21b5da574ad82bea14f18573959fe96c201b799b3c12e7006acf0501b68af8ece8a3c3707fb2ee086b70b07e5956b1eebcd31", &(0x7f0000000280)="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"], 0x10000}) syz_open_dev$sg(&(0x7f0000001280)='/dev/sg#\x00', 0x239, 0x200001) [ 556.496554][T11824] x_tables: unsorted underflow at hook 2 20:53:21 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x1e, &(0x7f0000002000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "428226355d0ee06b7c037189aeaee7a5546bf80788a1f2b83b60959ece63fd46a7e5ab07eb162441494b8e7e0d9b6662bfcbbacdab43b2159ad64af1e76d516795a380f99c420b8e0b5da52b09e5a859"}, 0xd8) [ 556.556423][T11824] x_tables: unsorted underflow at hook 2 20:53:21 executing program 0: bpf$MAP_CREATE(0x19, 0x0, 0x0) 20:53:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x40000, 0x0) 20:53:21 executing program 1: setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000040)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:21 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x100}}) 20:53:22 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) 20:53:22 executing program 0: r0 = socket(0x29, 0x805, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team0\x00'}) 20:53:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:22 executing program 2: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:22 executing program 1: socketpair(0x9, 0x80006, 0xee, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000001060500000000eeffffffff0b0000010500010007000000057d75000700000005000100070000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x84) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @window={0x3, 0x80, 0x8}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:22 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000002280)={&(0x7f0000000000)=@vsock, 0x80, 0x0}, 0x0) [ 557.590026][T11849] team0: mtu less than device minimum 20:53:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000001c0)=""/106) 20:53:22 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3fc0000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x101}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfa}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) 20:53:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:22 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 20:53:23 executing program 1: semget$private(0x0, 0x1, 0x208) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) r1 = semget$private(0x0, 0x2, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0x3, 0x1800}, {0x1, 0x7, 0x1000}, {0x0, 0xe4, 0x1000}, {0x2, 0x1}], 0x4) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 558.307592][ T29] audit: type=1326 audit(1599771203.037:25): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x50000 [ 558.329139][ T29] audit: type=1326 audit(1599771203.037:26): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.350162][ T29] audit: type=1326 audit(1599771203.037:27): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.371080][ T29] audit: type=1326 audit(1599771203.037:28): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.391992][ T29] audit: type=1326 audit(1599771203.037:29): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.412912][ T29] audit: type=1326 audit(1599771203.037:30): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.434167][ T29] audit: type=1326 audit(1599771203.037:31): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.455065][ T29] audit: type=1326 audit(1599771203.037:32): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.476016][ T29] audit: type=1326 audit(1599771203.037:33): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 20:53:23 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x40002) write$sndseq(r0, &(0x7f00000001c0)=[{0x9d, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"eb15925cc597eb44dc3a34fc"}}], 0x1c) [ 558.496946][ T29] audit: type=1326 audit(1599771203.037:34): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x50000 [ 558.592486][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 558.638323][T11876] bridge2: port 1(syz_tun) entered blocking state [ 558.645031][T11876] bridge2: port 1(syz_tun) entered disabled state [ 558.654178][T11876] device syz_tun entered promiscuous mode 20:53:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r1 = getegid() lchown(&(0x7f00000000c0)='./file0\x00', r0, r1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@private2}, 0x14) [ 558.703648][T11882] bridge2: port 2(netdevsim0) entered blocking state [ 558.710900][T11882] bridge2: port 2(netdevsim0) entered disabled state [ 558.720399][T11882] device netdevsim0 entered promiscuous mode 20:53:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:23 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc050565d, &(0x7f0000000200)={0x0, 0x1}) 20:53:23 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) geteuid() semctl$GETVAL(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000180)=""/198) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x402, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080), 0x4) r3 = dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000280)) sysfs$1(0x1, &(0x7f0000000000)='{-.\'-),.![/\x00') setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001240)={0x0, 0x1f}, 0x8) 20:53:23 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) 20:53:24 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x42}}) 20:53:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:24 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x1}) 20:53:24 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0xa}}) 20:53:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x19d) 20:53:24 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0xee8, 0x1, 0x4, 0x4000, 0x4, {r0, r1/1000+60000}, {0x4, 0x2, 0x3, 0x9, 0x7e, 0x2, "a8a30280"}, 0xe8c, 0x3, @offset=0x2800000, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000180)={0x1, 0x1, @start={0x0, 0x1, "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", "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"}, [0x1, 0x80000000, 0x8001, 0xff, 0x37, 0x3, 0x81, 0x80, 0x0, 0x5, 0x0, 0x2, 0x3, 0xffffffff, 0x0, 0x6, 0x9, 0x0, 0x3f, 0x60, 0x9, 0x4, 0x8, 0x3, 0x1, 0x6, 0x4, 0x0, 0x0, 0x3, 0x1, 0x81, 0x40, 0x2, 0x9, 0x3bd, 0x1, 0x0, 0x8, 0x80000001, 0xffffffffffffffff, 0x81, 0x1, 0x101, 0x9, 0x4, 0xac, 0xee, 0x10000, 0x10001, 0x0, 0x5, 0x4, 0x10001, 0x0, 0xc7, 0x7ff, 0x89, 0x8, 0x9, 0x800, 0x100, 0x8001, 0x1]}) 20:53:24 executing program 3: r0 = io_uring_setup(0x4eef, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 20:53:24 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2c, 0x0, 0x0, @local}}, 0x24) 20:53:25 executing program 1: semget(0x0, 0x4, 0x84) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 20:53:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 20:53:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev}}}]}]}, 0x44}}, 0x0) 20:53:25 executing program 4: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26}) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000200)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:25 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0xb, 0x0, 0x0) 20:53:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0xfffffffd}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xe0, "20b4916382b5ab66e353514f4951839dba00d10f461c6ca973b9807c21abad8aebbf4e1af3e504e42aedecdd36c082aaf9db5e36cdbcd6462333b148edd439c2b0c4aaa2c73ce2b13679597854150632fc1e2fa74028fae9f1ce745d2c7830721d21ca3b5d74f6f63834caaef51f3d92b48506cba86bf30d3f9b98bd057b2d4e8d3cfbdb693408ee58f67acc61e435d2de92a21c9ce03c8800b26d0d4b5817f31e5427172070ba4808c216ae41db73711c1c6d5115fbe32431c8f6749870213701f6d99e2936670c6e515aee687a18d6bb2c4856fe87542d831b4aca0e93afe1"}, &(0x7f0000000000)=0xe8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0x4c, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x8}]}, &(0x7f0000000280)=0x10) 20:53:25 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x201140) shmctl$IPC_RMID(0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000180)=""/231, 0xe7}], 0x2, &(0x7f0000000340)=""/70, 0x46}, 0x40) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300)=0x7fff, 0x4) 20:53:25 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280), 0x7, &(0x7f0000000300)={0x0}}, 0x0) 20:53:26 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x0}, @nl, @can, 0x100, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000040)='bond_slave_1\x00', 0xffffffff, 0x47, 0x6283}) 20:53:26 executing program 1: ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000180)={[0x22, 0xfffffffb, 0x4, 0xfff, 0x7fff, 0x2, 0x10, 0x1, 0x3, 0x2954, 0x0, 0x2, 0x0, 0x5, 0xe67d, 0xffff, 0xffff, 0x0, 0x80, 0xc2, 0x3, 0x385e0e9b, 0x5, 0x625d, 0x7, 0x2, 0x43, 0xc55, 0x1000, 0x8000, 0x1, 0x7ff, 0x100, 0x1, 0x3ff, 0x9, 0x6, 0x9, 0x8368, 0x7, 0x7fff, 0xfff, 0x4, 0x2, 0x1, 0x7f, 0x4, 0x7fff, 0x2, 0x2, 0xaca9, 0x40, 0x185, 0xe03f, 0x5, 0xd6c, 0x3, 0xfffff800, 0xff, 0x5, 0xffffffe1, 0x1000, 0x2, 0xba3, 0x7ff, 0x1a6, 0x10000000, 0x80000000, 0x0, 0x8, 0x9, 0x0, 0x5, 0x3, 0x50, 0x3fd, 0x2, 0x8, 0x10001, 0x5, 0x6927, 0x6aa, 0x5, 0x8, 0x400, 0x4, 0x3ff, 0x2, 0xa2a, 0xffff, 0xffff, 0x0, 0x88, 0x80000001, 0x8000, 0x1ff, 0x3, 0x80000001, 0x8000, 0x1, 0x9, 0x64, 0x76, 0x403, 0x36e, 0x101, 0x3, 0x6, 0x80000001, 0x5, 0x9, 0x3c20, 0x20, 0x200, 0x2, 0x3, 0x3ff, 0xfffffff9, 0x775, 0x849, 0x6, 0xb5, 0x7, 0xffffffff, 0x8, 0x682f, 0xfb55, 0x8, 0x10, 0xff, 0x6, 0xa5, 0x3, 0x2, 0x1, 0xc3f, 0x401, 0xfffffff9, 0x80, 0x10001, 0x1ff, 0x3, 0x0, 0x8, 0x8001, 0x3, 0x40, 0x10001, 0x80, 0x7fffffff, 0x0, 0x2e9d, 0x7fffffbf, 0x101, 0x2, 0x9, 0x7ff, 0xdd, 0x14, 0x8, 0x7, 0x8, 0xffff0000, 0xfff, 0x9, 0x3, 0x7, 0x1, 0x4, 0xc8, 0xffffffff, 0x9, 0xc, 0x5, 0x5, 0x4, 0x5, 0x1, 0x4, 0x2, 0x4, 0x2, 0x81, 0x7, 0x2, 0x8, 0x79d, 0x0, 0x2, 0x1, 0x101, 0x6, 0x15ba3f6a, 0x7fff, 0x7fff, 0x6, 0x20, 0x80000001, 0x2, 0x6, 0xdc3, 0x5a88, 0x9, 0x5, 0x0, 0x9, 0x6, 0x1000, 0x43242088, 0xffffffff, 0x401, 0x10000, 0x4, 0x7f38, 0x34, 0x7, 0x9872, 0x401, 0x10000, 0x8, 0x1, 0x0, 0xd306, 0x0, 0x3, 0x1000, 0x2, 0x240000, 0xff, 0x7, 0x6b50e35a, 0x80000001, 0x7, 0x20, 0x76, 0x7fff, 0x9, 0x2, 0x2, 0x400, 0x100, 0x101, 0x7fff, 0x80000001, 0x40, 0x0, 0x7f, 0x2, 0x40, 0x401, 0x0, 0x1, 0x3, 0x8001, 0x80000000, 0x1ff, 0xf0, 0x2, 0x5, 0x1ff, 0x0, 0x0, 0xff, 0x8, 0x3, 0x20, 0x101, 0x3, 0xffffffff, 0x100, 0x5, 0x200, 0x2, 0x1, 0x82, 0x1, 0x2, 0xfff, 0x0, 0xfffffe01, 0xff, 0x0, 0x8001, 0x3ff, 0x6, 0x401, 0x5, 0x7, 0x25, 0x80000000, 0x6, 0x5, 0x0, 0x8001, 0xc772, 0x8, 0x1000, 0xffff, 0x81, 0x7, 0x5, 0x3, 0x800, 0x284, 0xfffff001, 0x1, 0x4, 0x400, 0x27d7, 0x800, 0x7c8d7480, 0x400, 0x2, 0xffff8001, 0x40de, 0x200, 0x2, 0x0, 0x50000000, 0x8001, 0x7, 0xd8, 0xc177, 0xe7, 0x3, 0x0, 0x91, 0x3, 0x101, 0x7c, 0x1c8c00, 0x8, 0x7fff, 0x0, 0x2, 0x3baf, 0x20, 0x6, 0x10001, 0xd0, 0x7, 0x3, 0x0, 0xdc, 0x4, 0x9, 0xfff, 0xff, 0x4, 0xb1c5, 0x4, 0x7, 0x81, 0x9, 0x2, 0x3f, 0x8b6, 0x0, 0x9, 0x7, 0x5, 0x0, 0x8000, 0x3, 0x9, 0x9, 0x7, 0x4, 0x7, 0x81, 0x7ff, 0x6, 0x9, 0x8, 0xa49, 0x9, 0x7f, 0x3ff, 0x95e, 0x0, 0x8, 0xc8, 0x3, 0x0, 0x4, 0x80000001, 0x5, 0x80000001, 0x8001, 0x2, 0x100, 0x49, 0x7, 0x7ff, 0x401, 0xffffffff, 0x1cf001b1, 0x0, 0xb96d, 0x3, 0xfffffff9, 0x10000, 0x5, 0x408, 0xface, 0x8001, 0x0, 0x5, 0x1, 0x9269, 0x7fff, 0x4, 0x0, 0xc46, 0x20, 0x2, 0x80000001, 0x3, 0x2, 0x7ff, 0x7, 0x3, 0x4, 0x70e2, 0x54d, 0x6b58, 0x100, 0x40, 0x96, 0x2, 0x3, 0x8000, 0x10d2f722, 0x57, 0xffffffff, 0x9, 0xd3e, 0x2, 0xfffffffc, 0x0, 0x7, 0x6, 0x8, 0x3421, 0x3, 0x2e, 0xfffffffa, 0x4, 0x9, 0x80000000, 0x3ff, 0x7, 0x9e, 0x5, 0x401, 0x9d, 0x8, 0x8001, 0x7, 0x1, 0xff, 0x4, 0x3, 0x0, 0xc980, 0x6, 0x80000000, 0xffff, 0x200, 0xc3, 0x9, 0x40, 0x8, 0x1, 0x6cd9, 0x33e5, 0x401, 0x6, 0x7f, 0x6, 0x7, 0x9, 0xea88, 0x7, 0x1a7d, 0x2, 0x3ff, 0x81, 0x8, 0x1ff, 0x3c, 0x29, 0x80000000, 0x1, 0x36c7bb, 0x6, 0x3, 0x10000, 0x3, 0xa75, 0x1, 0x50000, 0x3, 0xfffffffa, 0x100, 0x9, 0x5, 0x1f, 0x1, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x4, 0x9, 0x80000000, 0x2, 0x3, 0x5, 0x10001, 0xf74, 0x8, 0x0, 0x7, 0xb60, 0xc455, 0x80000001, 0x3, 0x6, 0x4, 0xffffffff, 0x9, 0x80000001, 0x8001, 0x3f, 0x3, 0x401, 0x344d, 0x8, 0x37, 0xfef2, 0x1, 0x100, 0x4, 0xffffbb08, 0x80, 0x5, 0x9cb, 0x8, 0x3ff, 0x8, 0x6, 0xfffffe01, 0x208, 0x9, 0x7, 0x81, 0x9, 0x5, 0xf162, 0x1000, 0x9, 0x200, 0x0, 0x56, 0x20, 0x4e, 0x4, 0xffff, 0x319d, 0x6, 0x7ff, 0xa440, 0x55d, 0x20, 0x3f, 0x200, 0x739, 0xb481, 0x3, 0x1ff, 0x9, 0x9, 0x4, 0x3, 0x200, 0x5, 0x5, 0x7f, 0x9, 0x2, 0x7fff, 0x4, 0x7, 0x9, 0x2, 0x0, 0x6, 0x101, 0x7, 0x9, 0x2, 0xfff, 0x8, 0xa00000, 0xb35, 0x4, 0x1196, 0x5, 0x1, 0x7ff, 0x10000, 0x3ff, 0x1, 0x2, 0x7, 0x8000, 0x0, 0x3, 0x4088, 0x7, 0x73bad095, 0x81, 0x74b1, 0x40, 0x1ff, 0x1605, 0x0, 0x101, 0x9, 0x5, 0xd6, 0x6, 0x2, 0xe78, 0x9f3f, 0x80000000, 0x7fff, 0x9, 0x400, 0xbc, 0x2688b74e, 0x0, 0x81, 0x9, 0xfffffffb, 0xc8, 0x101, 0xffffff7f, 0x7ff, 0x0, 0xe6, 0x9a30, 0x5, 0x3f, 0x20, 0x1f, 0x3, 0xfffff4e3, 0x3, 0x3, 0x7, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x5, 0x8, 0x7fffffff, 0xbb1, 0xebe7, 0x81, 0x1, 0x3f, 0x2, 0x1d1, 0x4, 0x80000000, 0x10000, 0x0, 0x716b5e44, 0xad, 0x3, 0x3, 0x3, 0x400, 0x80000000, 0x6, 0x4, 0xa, 0x7f, 0x7f, 0x0, 0x6, 0x7, 0x3, 0x6, 0x81, 0x8, 0x8000, 0x8e, 0xffffffff, 0x100, 0x5, 0x4, 0xf83, 0x7, 0x7d1, 0x2, 0x8, 0x0, 0x8000, 0x4, 0x2, 0x6, 0x8001, 0x7, 0x3f, 0x3, 0x6, 0x6b000000, 0xffffffff, 0x3, 0x798, 0x8, 0x5, 0x1, 0x1b, 0x3f, 0xdb4, 0x8, 0x5, 0x8001, 0x9, 0x1, 0x7, 0x80000000, 0x3, 0x5, 0xfffffffc, 0x1, 0xa2, 0x3, 0x80000000, 0x1, 0x5e, 0x40, 0x20, 0x5, 0x7, 0xff, 0x83, 0x6, 0xfffffffd, 0xa4, 0x7fffffff, 0x1, 0x4, 0x6, 0x8, 0x9, 0x80000001, 0x10000, 0x401, 0xa06, 0x8, 0x281d, 0x0, 0x4, 0x3, 0x0, 0x7ec6, 0x3, 0x8, 0x1, 0x9, 0x20, 0x8001, 0x6, 0xfff, 0x7fffffff, 0x2, 0x6dc, 0xffff, 0xdefb, 0x1e, 0xdc18, 0x2, 0x0, 0x2, 0x5, 0xfff, 0x8000, 0x100, 0x5, 0x7ff, 0x3, 0x0, 0xb3, 0x17, 0x401, 0x7ff, 0x9, 0x1, 0x3, 0x7, 0x7ff, 0x7f, 0x8, 0x800, 0x3ff, 0x81, 0xfffffffa, 0x0, 0x2, 0x0, 0xfff, 0x2, 0x100, 0x0, 0x7e7, 0x6842, 0x1, 0x2f, 0x6fbe, 0x5, 0x1, 0x10000, 0x9, 0xffffff81, 0x1ff, 0x3, 0x3, 0x7, 0x8000, 0x2, 0x3, 0x8, 0x1ff, 0xffffffff, 0x441, 0xb4, 0x80000001, 0xdc, 0x9, 0x6, 0xb, 0x1f, 0x10000, 0x5, 0x80, 0x200, 0x80000001, 0x4, 0x7, 0x80000001, 0x2, 0x9, 0x3, 0x1, 0x7, 0x0, 0xbe5, 0x4, 0x1ff, 0x8001, 0xffffff81, 0x9, 0xd9a7, 0x6, 0x4, 0x6, 0x4, 0x9, 0xb66, 0x2, 0x8, 0x81, 0xe549, 0x817, 0x8001, 0x1, 0x400, 0x1, 0xfffffff7, 0xfffffff8, 0x1, 0x2, 0x8, 0x6, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xffffcb81, 0x9, 0x7, 0x2, 0x1000, 0x1, 0xce7, 0x2, 0x400, 0x8000, 0x2, 0x5, 0x1000, 0x8, 0x3, 0x1, 0x10001, 0x5f2, 0xfff, 0x1, 0xabb1, 0xffff8001, 0x8, 0x80, 0xfffffffb, 0x8, 0x81, 0x9, 0x80, 0x28a, 0x10000, 0x3, 0x1, 0x1ff, 0x2, 0x8, 0x8001, 0x0, 0x1, 0x7, 0x3, 0x8, 0x3ff, 0x6, 0x8, 0x8, 0x3f, 0x9, 0x2, 0x20, 0x0, 0x7, 0x8, 0xca1e, 0x1, 0x3, 0x7, 0x1000, 0x8f2d, 0x81, 0x7, 0x10000, 0x400, 0x3, 0x3, 0x4, 0x8000, 0x3f, 0x7d2, 0x8, 0x7f, 0x4, 0x7, 0x1c, 0xfffffffc, 0x8, 0x6, 0xc6, 0x80000000, 0x5, 0x8001, 0x749, 0x7, 0x6, 0x9d, 0x5, 0xfff, 0x8, 0x1, 0x9, 0x3, 0x6, 0x7da3, 0x6, 0x10000, 0x3, 0x80, 0x7, 0x80000000, 0xb3cd, 0x3, 0x4, 0xffffffff, 0x2b7, 0x3, 0xe067, 0x9, 0x7, 0x0, 0x0, 0xfffff001, 0x8, 0x2, 0x5, 0x101, 0x40, 0xeaa0, 0x3, 0x1, 0x1000, 0xffff, 0xffffffff, 0x3, 0x401, 0x7]}) 20:53:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) [ 561.685082][T11958] x_tables: unsorted underflow at hook 2 20:53:26 executing program 0: io_setup(0xa5ea, &(0x7f00000000c0)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xffffffffffff8001}]) [ 561.743102][T11958] x_tables: unsorted underflow at hook 2 20:53:26 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket(0x2, 0xa, 0x0) close(r1) 20:53:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0xfffffffc}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:26 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x50800, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2001, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) 20:53:26 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x0, 0x2000}, {0x4}, {0x3, 0x3, 0x1000}, {0x3, 0x0, 0x1800}, {0x0, 0x9, 0x800}, {}, {0x4, 0x0, 0x800}], 0x7) 20:53:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:27 executing program 2: ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000000c0)={0x9877, "738e92ae9302896e810c14dfdd5ec92c9d2231fb1ddf7f2a093423c23b2f486d", 0x0, 0x40, 0x952d, 0x9, 0x10, 0x4, 0x3f, 0x4c6}) keyctl$read(0xb, 0x0, &(0x7f0000000140)=""/191, 0xbf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:27 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x6d, &(0x7f0000000000)=""/227, &(0x7f0000000100)=0xe3) 20:53:27 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) accept4(r4, 0x0, &(0x7f0000000040), 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) fsync(r1) 20:53:27 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x3e, 0x0, &(0x7f0000000140)) 20:53:27 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = shmget(0x1, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/198) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0xfe5afa9028305077) [ 562.824213][T11990] x_tables: unsorted underflow at hook 2 [ 562.892571][T11990] x_tables: unsorted underflow at hook 2 20:53:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) [ 562.938622][T11995] x_tables: unsorted underflow at hook 2 [ 563.002884][T11995] x_tables: unsorted underflow at hook 2 [ 563.012156][T11998] x_tables: unsorted underflow at hook 2 20:53:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x5521, 0x0) 20:53:27 executing program 4: ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/146) 20:53:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) 20:53:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000900)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 20:53:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffffffd}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:28 executing program 3: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:53:28 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:28 executing program 0: getitimer(0x1, &(0x7f0000002540)) 20:53:28 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000280)=""/236) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000180)=""/251) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) 20:53:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) fchownat(r2, &(0x7f0000000180)='./file0\x00', 0xee01, 0xee00, 0x800) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x80, 0x0) dup3(r4, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x10001, 0x0) dup3(r6, r5, 0x0) getdents(r5, &(0x7f0000000240)=""/4096, 0x1000) read$char_raw(r5, &(0x7f0000000200)={""/1596}, 0x800) write$fb(r0, &(0x7f00000000c0)="7acda1665de3f0dd9a1ad7a737219930f1835bfe29752207b97f23913ac891c847203fa04367d12497a372329b9b5ffa600d5fd37725766327b0a9f4a8d33bd39b84a39153d009b654d37ee28444a076", 0x50) 20:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x0) 20:53:28 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) 20:53:28 executing program 0: keyctl$instantiate_iov(0x1c, 0x0, 0x0, 0x0, 0x0) 20:53:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = dup3(r0, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000740)={0x0, 0x1000}, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/144) [ 564.421205][T12031] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 20:53:29 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/140) [ 564.598535][T12036] x_tables: unsorted underflow at hook 2 [ 564.633182][T12036] x_tables: unsorted underflow at hook 2 20:53:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(0x0, 0x80000001, 0x0) 20:53:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000003c0)=""/236, 0x2c, 0xec, 0x1}, 0x20) 20:53:29 executing program 0: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x7d, 0x0, 0x0) 20:53:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) restart_syscall() semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/165) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0x100, 0x0, 0xfffa}) r1 = dup3(0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:53:29 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/140) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/76, 0x4c) 20:53:30 executing program 3: r0 = io_uring_setup(0x1a42, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x2, &(0x7f0000000100), 0x300) 20:53:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x0, 0x10}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(0x0, 0x80000001, 0x0) 20:53:30 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x410900, 0x0) 20:53:30 executing program 4: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x43, 0xdb}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:30 executing program 0: r0 = socket(0x2, 0x3, 0x2) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2}, 0x10, &(0x7f00000000c0)={0x0}, 0x8}, 0x0) 20:53:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 20:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(0x0, 0x80000001, 0x0) 20:53:30 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x200) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000013c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300)='/dev/vcs\x00', 0x105001, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380)='devlink\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) syz_open_dev$dmmidi(&(0x7f0000001280)='/dev/dmmidi#\x00', 0x9, 0x226000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000001440)=""/1) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000000c0)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r9, 0x2}, &(0x7f0000000040)=0x8) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000001240)={&(0x7f00000014c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080028bd7000fcdbdf250b0000000800010070636900ccfe0200303030303a30303a31302e300000000008000b0080000004000000007063690011000200303030303a30303a31302e300000000008000b00020000028310f89e085d1ec163136d79306edc24fa000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 20:53:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 20:53:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 20:53:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x4004556e, &(0x7f0000000440)={{}, 'syz1\x00'}) 20:53:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) 20:53:31 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x200000, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0xf, 0x2}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000001240)="fd582da634dd11a5828344430b87ac581a573199e032d8aca05222ba7f7b99315c00145cf175bc289979f17d23de09f42030d19befef8bf037cc98ff792f9c0e46953733fb7bde05849153bbf22b33a2db8b2fc36d48a13d7502e20aad23a1b77a193148c3947133e45ed96c5e367dc590bb55e72d852d259bcd57676e686e2ebbbeda13e2124f76fa80ad6b08196b4c96c21cfb2018f508315c802870f5b0758a98c33f6b257fb71fd8b286056aa7335f00f28f51fedb0df8e90faa326c2f66da63d5d474068f3dec0c53aded51d353e7dc74ff1241358b5865c060f3aea1b25d", 0xe1) dup3(r0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0x1000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r6 = semget(0x1, 0x1, 0x254) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f00000000c0)=""/159) 20:53:31 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x402203, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x259b4) 20:53:31 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000000)={0x7, 0x5, 0xfffffffa, 0x3, 'syz0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:31 executing program 0: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0xc, 0x0, 0x0) 20:53:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x3000}, &(0x7f0000000040)=0xffffff4c) 20:53:31 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="7d652d0e3a83e5e8925f7805250f667ce769f9a6d5fc7a4bb2172f09bb615a39fb60e720dd8c7f90834a0db3ba2e6197587c78ee732d282f3ce1f26b95380c9b814312c1bd0d4e72e8d5089f1016bf291d5fe4d495d277cf5db9aaa64ea90f462518e31a04802254ed82ee7ad299e2111702c6adbb670a3d0e721bf2a0efb03694487dafd77b22262143f81d7b7a1dbe2c06160c8c26445febb31bd5826147f4700f58867d9b194dc18465adac6333bc345365d554d6d1b26afe8762e5b714a917bfa646cfcff7eefdf21a47a5ea2d588cb059be88d979644ca3", 0xda, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) socket$nl_rdma(0x10, 0x3, 0x14) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/133) 20:53:31 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/131) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000180)={0x0, 0x7, 0x0}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{0x5, 0x6, 0x7, 0x4, 0x1f, 0x3, 0x5, 0x8, 0x7f, 0x40, 0x9, 0x7, 0x1}, {0x5, 0x3126, 0xe0, 0xbb, 0x66, 0x3, 0x5a, 0x20, 0x4, 0x11, 0x81, 0x0, 0x1000}, {0x7fffffff, 0x0, 0x7f, 0xa3, 0xcd, 0x6, 0x3, 0x4f, 0x81, 0x1, 0x3, 0x3, 0x1}], 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 20:53:32 executing program 5: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r0, 0x0) r1 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x1, 0x1c1a40) read$char_raw(r1, &(0x7f0000002400)={""/20670}, 0x5200) r2 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x1, 0x189041) write$char_raw(r2, &(0x7f0000007600)={'J'}, 0x200) 20:53:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x100) rmdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000001c0)='./file0\x00', 0x141, 0x208) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000180)) 20:53:32 executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x890d, 0x0) 20:53:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x31424752}}) 20:53:32 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x5, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) getsockname$qrtr(r3, &(0x7f0000000000), &(0x7f0000000040)=0xc) 20:53:32 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@nat={'nat\x00', 0x19, 0x3, 0x3b2, [0x20000180, 0x0, 0x0, 0x20000306, 0x2000042c], 0x0, &(0x7f0000000080), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0xd, 0x9100, 'vlan1\x00', 'ipvlan1\x00', 'veth0_to_bridge\x00', 'netdevsim0\x00', @multicast, [0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0x11e, 0x156, [@time={{'time\x00', 0x0, 0x18}, {{0x7f, 0x3f07, 0x5087, 0x14eb, 0x4, 0x3c, 0x2}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x9, 0x9, 0x60, 'dummy0\x00', 'ip_vti0\x00', '\x00', 'wg2\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1a, 'syz0\x00', {0x3}}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x20, 0x739d, 'hsr0\x00', 'netpci0\x00', 'macvtap0\x00', 'rose0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x6, 0x16, 0x3, 0x5}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffb}}}}]}]}, 0x42a) 20:53:32 executing program 5: r0 = socket(0x2, 0x3, 0x7f) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x21, &(0x7f00000001c0)={0xffffffff}, 0xc) 20:53:32 executing program 3: clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58) 20:53:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 568.135381][T12124] x_tables: unsorted underflow at hook 2 [ 568.191375][T12127] x_tables: unsorted underflow at hook 2 20:53:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, &(0x7f0000000000)=0x80) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@loopback, @private=0xa010101, 0x0, 0x1, [@remote]}, 0x14) open(0x0, 0x0, 0x0) 20:53:33 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xd03, 0x40) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000040)=[0x9, 0x0, 0x1, 0x6], &(0x7f0000000080)=[0x7, 0x9, 0x4, 0x6], 0x32, 0x2, 0x6, &(0x7f0000000180)=[0xfd, 0x8], &(0x7f00000001c0)=[0x8001, 0x81, 0x400, 0x7, 0xeae3, 0x37, 0x5, 0x5e1c89d3, 0x7, 0x7b]}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:33 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'team0\x00'}}}}, ["", "", "", "", ""]}, 0x30}}, 0x40841) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="19000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000018000580"], 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="b53d34e704e689a44623e57a4a0f27ebd7a4b6a3872ecdb3", @ANYRES16=r1, @ANYBLOB="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"], 0x113c}, 0x1, 0x0, 0x0, 0x20000843}, 0x40080) 20:53:33 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x4142, 0x0) 20:53:33 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003, r2}) 20:53:33 executing program 5: prctl$PR_CAP_AMBIENT(0x18, 0xda, 0x0) [ 568.749456][T12139] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 568.858242][T12143] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 20:53:33 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/139) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x234000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'ipvlan0\x00', 0x24}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) getpeername$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) 20:53:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x34}}, 0x0) 20:53:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x17, r1, &(0x7f0000000000)='.dead\x00', 0x0) 20:53:33 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000180)) 20:53:33 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, [{}]}, 0x88) 20:53:34 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = open(0x0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="09cae2f88bfab7b711a1bf2d7d0f4d7d79977d979aedb1840b8de3edc889d84df910c3ad98023c50a53eaf", 0x2b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) io_submit(0x0, 0xa, &(0x7f0000001e00)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f00000012c0)="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", 0xfa, 0x8, 0x0, 0x6, r1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0xfd4a, 0xffffffffffffffff, &(0x7f0000001400)="36188e3f7f28abbda532a48e33039af53a0bf134fb77e91164dda146d74a9b379eae3b6a49aec1209c22849e21f28b082a1dab3c856faf7a86000a902b888f8af3ebfa943f7acf5a04e206cabf14ec5c8508ebd531ac9443244624f1238203d102afbce08ca22cc262a9ac96e6f76af7ff347095e575518b5fe3857cdc0f17f2547c9046bbfaaa9c29d54312669b01f21067144bc14383ebeb2b8de1b0", 0x9d, 0x0, 0x0, 0x2, r1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000001540)="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", 0xfa, 0x0, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x7f, 0xffffffffffffffff, &(0x7f0000001680)="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", 0xfc, 0x100000001, 0x0, 0x2}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x8, 0x4000, r1, &(0x7f00000017c0)="f18776ed5ec38248bb42970b76092cdc16d823c2e13d5bba3d11f261f27e1b8292058af32a6bbea03f0b7b5882ac38a12c", 0x31, 0xfff, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x8, 0xb99b, 0xffffffffffffffff, &(0x7f0000001880)="80e5958b8aa2caad57cea527f760af94badaaf991a1f540055435e6fd3e06f8c04477857fed28c121cacf90a70dec92c8845d3e258abd9637ac3d77bb3052c9dd3b1ae6f756f7880f7ff567a233f5ab6b5c49a8b91cd23c5190028feaa4efbd6358a6601940e2a975998b9c45d1081742e555fb13bbe98813dbdcea9269295d54194d139068dee041c37827174e40f9ca84c4a0986107aac4c84c40f417234f4a9656cf586048ff71fade3589dea0ffc3f71438cef9678e399fc6fbb636d99729a8371478cd54eae1b019ad39b21a5b0d26f2faa6b01de9112fe70161677d65e", 0xe0, 0x8}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x401, 0xffffffffffffffff, &(0x7f00000019c0)="3a4cdb3ab55b4c4ebe358954240bb3a31301defc025340e90be8e01d8995a90149884311aa2e108950c29cf3ec13a89a8da8ae7050040a5348735adb52bcecd7150fdb8ccffbeba35093d2c80da812537c2ad86d7fe5c3e819d78316fea60e239341cfa7e0f572469337efbab0bea05d3cefc677a303a7b9c667f748a59f31131a16a1c6a75cd680aa2bf2feadeda7880f116161f833cf", 0x97, 0x9, 0x0, 0x2, r1}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x8, 0x80, r1, &(0x7f0000001ac0)="a177902bc7f8213e0956ac8b461f014323", 0x11, 0xfffffffffffffffc, 0x0, 0x2}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x5, 0x400, r0, &(0x7f0000001b80)="9b92698e5dd0738cbd9857e8961ba9872f588f9fbe6b2ceeebe09b20a28545b28a590ff53e70345d92457dff1cbf2467d54a2689382e3dd5d24afaff5ca9919fb57843262e59edcddfb7c66b0666cdac992b3e4d507df8b97decefe54146377cb39aac527228fd7c257de6", 0x6b, 0x80000000, 0x0, 0x2}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000001cc0)="3f4205f01d04993b19bb5476332fc565e2fb8ca5d77c4c609b584acf1eb1bd38d8cc715f5f6d3fec3d9cf673d3b204134c792be35f1a7aabde35121e86aa6fd5c429428304a7d494ef00a57ff2b5b723c0b255eefeef6db775802057c198708a6058b3c9093013f70ca48433b5ee87ce00212660202bd2a6ccae5286ff21159c5a4b61dc888c096e6b4229e6c28a025872ff217bda21116b2c26174a2b2045ef36836c874ecc5b9b771f80a4d79682cfb6ff75e707cd754c3b5a073aa7000ec4ed3f1041ea8305d1e4f19c7abaeac760b3df46797a0c12a6469d60b90f0d4e9a76942398e892e3", 0xe7, 0x80000000, 0x0, 0x2, r2}]) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x82, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xe) r5 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x3f, 0x109000) getpeername$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r7, r6, 0x0) getdents(r6, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@private, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) r8 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x10001, 0x10800) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000380)) fsetxattr$trusted_overlay_origin(r8, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) [ 569.346648][T12153] x_tables: unsorted underflow at hook 2 [ 569.405543][T12158] x_tables: unsorted underflow at hook 2 20:53:34 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/150) 20:53:34 executing program 0: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x2, 0x0, 0x0) 20:53:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x82, 0x0, &(0x7f0000000100)) 20:53:34 executing program 3: r0 = socket(0x2a, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f00000001c0)={0x2a}, 0x10) 20:53:34 executing program 1: mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x24000000000) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 20:53:34 executing program 0: r0 = socket(0x2, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10003) 20:53:34 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/145) 20:53:35 executing program 5: r0 = io_uring_setup(0x40fd, &(0x7f0000000100)) io_uring_enter(r0, 0x263b, 0x0, 0x0, 0x0, 0x0) 20:53:35 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8913, &(0x7f0000000100)={'batadv_slave_0\x00'}) 20:53:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000a00)={{0x1, 0x0, @identifier="20c46061e8b77ae326a6e66bb98bf010"}}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) clock_adjtime(0x0, &(0x7f0000000900)={0x80000001, 0x4ce47c7e, 0x4, 0xf6, 0x8, 0x3, 0xfff, 0x7, 0x33, 0x0, 0x2, 0x80000000, 0x7, 0x4, 0x4, 0x7, 0xffffffff00000000, 0x1000, 0x401, 0xffff, 0x3ff, 0xffff, 0x0, 0x6ed166d1, 0x8, 0x7}) r1 = syz_usb_connect$uac1(0x4, 0xfc, &(0x7f0000000180)={{0x12, 0x1, 0x670, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x5, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x2}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0x20, "590819c001"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x205, 0x4, 0x5f, 0xfffb, 0x7, 0x6}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x3, 0x5, [0x6, 0x57a1e6557048fc98, 0x9, 0x5, 0x8], 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x77}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x2, "5b7fd14c37775336fc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0xff, 0x49, "1748", "e1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x1, 0x79, 0x3f, 'n'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3f, 0x0, 0x20, {0x7, 0x25, 0x1, 0x2, 0x9, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0xff, 0x88, "634490f6"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x20, "ea55a37b6bc096"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x3, 0x8, 0x1f, "738c", "95cbe2"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x7, 0x2, "dd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2b, 0x6, 0x0, {0x7, 0x25, 0x1, 0x83, 0x20, 0xf072}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x40, 0x20, 0x5, 0x20, 0x3}, 0xdd, &(0x7f0000000280)={0x5, 0xf, 0xdd, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2c19bcbdc01750100fb885a04d206799"}, @ss_container_id={0x14, 0x10, 0x4, 0xf0, "09b61c07091101deba7438ba2335b27d"}, @generic={0x9a, 0x10, 0x3, "9c253a2ab030a6fd90b7b7b01b1c87d0c150b81137be2dca690015a45b4c2e8f2cf6715daead755a0cbb2ec57ebf6945e357eeb01377fa1f0cd3c6dc7b42b9aac17a7ebaf9e305f94553fb80a7fd9535bbae371ce2f95abdc8b318961aeaea53dacede0a7c0da8a8cb4f656e4a5e8b20d6cf6c1a7f35054f684fc40044b5360d0e83d7dcffe0f5011fe8cb8f46793de5c998755ac7c118"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x2, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x3ff, 0xf000, 0xfffa}]}, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x32, &(0x7f0000000080)=@string={0x32, 0x3, "d7b3d35d4dc527694dd1b0949fb598e25d011e38f475b96f23e2a65e6949c42f8b5466ef6397bf8b8ae9f0a73fb85fc7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8f8}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000400)={0x40, 0x17, 0x8f, {0x8f, 0xa, "fae458b1b9cf1dcf3ea7607ce32946f47477b493665c4ae9e6cb317befb386f8a228292f6be1100cabcebbf283b8ee7f89d1813e126f0127ce0acf760d2367e1f95237fa6e1bcba9e44f42638cbc1f2e0bd9897a436d5df745c9f29982360967a2855c7a9302b1ff97390112a0eb968b99343937903363bb21c606656539821d163d47bc3861c1f4ce197648aa"}}, &(0x7f00000004c0)={0x0, 0x3, 0xe8, @string={0xe8, 0x3, "6af4d1c918988e2832080e23cc110f73b19dab21aea65575c016a6e0e34d14d82725c71a3bb01fcf430d9f8cf42406d7f2a609b6a343ddae441a10ae3a425d3b7f7445733b696535a9bc06ca6981ea5d074b9e0589eb15019485640f41c7af78b4ea90cee19d9d8fee5cacc7be3c333b5cad68f33a71c966d72a4a513edc25b459916bdc05cf4d9a1b9ac783c1d6ae109cefbe168df1e67682e92b0acf0ec86379e241a39f3ed714cfd197df051d0fb5c8f39cc11c7781dac6fe3b8be3d026ddaa26ab8193c5c9f022093f08fed9d9cd5307353d5163f08a1cee1a2a349f9c5d33949676fc0c"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x40, 0xa, 0xa0, "6cd4b0980e3dec0db4d7b797c74336683b48eeadc21d28db41d0d1a90d9aae11fd97559d0af7d90b26f873e2c7eeb6020b646fb4b114bfebf0e1ee6f20b7b7c56159f12b69a475d84e33d7cf6fdd8b5255e8deaa3f30ae88224bb0a983cbff04c99dd53c82e25280a7f7487d0562d8bbda5c18e29f15759f1e37627e763c5327d0baaee5f630a9f5ccd14a9a98da122b07b69fb72e3fbc74e41b55ccad0f05f9"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000740)={0x20, 0x81, 0x2, "37fd"}, &(0x7f0000000780)={0x20, 0x82, 0x2, '9\f'}, &(0x7f00000007c0)={0x20, 0x83, 0x3, "cc2855"}, &(0x7f0000000800)={0x20, 0x84, 0x4, "d124932f"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "978f1e"}}) 20:53:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x34}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8058}, 0x4800) open(0x0, 0x0, 0x0) 20:53:35 executing program 4: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/140) [ 570.686792][T12190] x_tables: unsorted underflow at hook 2 20:53:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5601, &(0x7f0000000140)) 20:53:35 executing program 5: r0 = socket(0x2, 0x3, 0x1) connect$netlink(r0, &(0x7f0000000080)=@proc, 0xc) 20:53:35 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4a0040, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x5c, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x20, @private1={0xfc, 0x1, [], 0x1}, 0x10001}]}, &(0x7f0000000200)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'xfrm0\x00', {0x2, 0x4e20, @multicast2}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1, 0x8, 0x7f}, 0x8) 20:53:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0000100}]}) [ 571.256195][T12190] x_tables: unsorted underflow at hook 2 20:53:36 executing program 5: r0 = socket(0xa, 0x6, 0x0) bind$vsock_stream(r0, 0x0, 0x0) [ 571.405880][T12204] x_tables: unsorted underflow at hook 2 20:53:36 executing program 0: r0 = socket(0x22, 0x3, 0x0) getpeername$packet(r0, 0x0, 0x0) 20:53:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x63, 0x9, 0x8000, 0x1a, @mcast2, @private0, 0x40, 0x8, 0x6, 0x401}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x7, 0x20, 0xb0, 0x5, {{0xa, 0x4, 0x0, 0x3a, 0x28, 0x67, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0xc, 0x7f, 0x0, 0x3, [0x782c0ed, 0x400]}, @generic={0x86, 0x8, "e22a9e9fec99"}]}}}}}) 20:53:36 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000000)=""/84) 20:53:36 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x140e, 0x800, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x7fffffff}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x8080) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:36 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 20:53:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c, 0x0}}], 0x1, 0x20004011) 20:53:36 executing program 1: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz0', "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"}, 0x1004) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[@ANYBLOB="e000000000000000", @ANYRES64=0x0, @ANYBLOB="0400000000000000ff0300000600000004000000ff7f00005c235c6c0000000004000000000000003f00000000000008000000000900000073797a300000000003000000000000000000000000000000040000000080000025a52c7b00000000000000000000000000000000090000000600000000000000fdffffffffffffff00000000fae20000010000000000000003000000000000000700000001000000bf242825a32526000000000000000000060000000000000004000000030eb8f5989f12ef5500"/208], 0xe0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5457, &(0x7f0000000080)) 20:53:36 executing program 4: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x100, 0xffffffff, 0x0, 'queue1\x00', 0x101}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x6}) 20:53:37 executing program 3: r0 = socket(0x2a, 0x2400000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x1f8}, 0x0) 20:53:37 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000180)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x306}, 0x2, {0x2, 0x4e24, @multicast2}, 'macvlan0\x00'}) 20:53:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) [ 572.772594][T12249] x_tables: unsorted underflow at hook 2 [ 572.805188][T12249] x_tables: unsorted underflow at hook 2 20:53:37 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e21, @empty}}) 20:53:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x42b03) read$FUSE(r0, 0x0, 0xf0ffffff7f0000) 20:53:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xffff}, {0x4d, 0x20, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) open(0x0, 0x100000, 0x30) 20:53:38 executing program 0: clone3(&(0x7f0000000280)={0x100004800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:53:38 executing program 5: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8911, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 20:53:38 executing program 1: ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xce8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:38 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89b1, &(0x7f0000000280)={'sit0\x00', 0x0}) 20:53:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000003c00)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 20:53:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) 20:53:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x30, 0x0, &(0x7f0000000140)) 20:53:38 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/166, 0xa6}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/158) 20:53:38 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000100)=""/249, 0x37, 0xf9, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) 20:53:38 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:53:39 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000080}, 0x8881) 20:53:39 executing program 5: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x75, 0x0, 0x0) 20:53:39 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xf, &(0x7f0000000040)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) [ 574.578496][ T4598] Bluetooth: hci2: command 0x0406 tx timeout 20:53:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0945662, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5c62e643"}, 0x0, 0x0, @fd}) 20:53:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x10000}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r3}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r3, 0x401}, 0x8) 20:53:39 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0x2, 0x0, 0x0) 20:53:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x5, 0x0, 0x0, "f7c4baaa68bd"}}) 20:53:40 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)) 20:53:40 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4001) 20:53:40 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) [ 575.536896][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 575.536955][ T29] audit: type=1326 audit(1599771220.267:86): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12305 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:53:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname(r1, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0x64}}, 0x0) 20:53:40 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x4d00, 0x0) [ 576.001306][T12318] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:53:40 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x1, 0x7}, 0x5}, 0x20, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000040)=""/24) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) 20:53:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2e, 0x0, &(0x7f0000000140)) 20:53:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x9, 0x30364d54, 0x3, @stepwise={0xfff, 0x8001, 0x7fff, 0x2, 0x910, 0xfffffffc}}) open(0x0, 0x0, 0x0) [ 576.266834][ T29] audit: type=1326 audit(1599771220.997:87): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12305 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:53:41 executing program 5: iopl(0x3) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) 20:53:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x200002b9, &(0x7f00000008c0)=@framed={{}, [@jmp, @alu, @map]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:53:41 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getresuid(&(0x7f0000005ec0), &(0x7f0000005f00), &(0x7f0000005f40)) 20:53:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x400d80, 0x100) 20:53:41 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8903, &(0x7f0000000280)={'sit0\x00', 0x0}) 20:53:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x5421, &(0x7f0000000e80)) 20:53:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0xffffffffffffff43, 0x0) 20:53:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) open(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) 20:53:42 executing program 0: r0 = socket$rds(0xa, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x29, 0x6, 0x0, 0x0) 20:53:42 executing program 5: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000040)=0x5, 0x401, 0x0) 20:53:42 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 20:53:42 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x12002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r4, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0xffffffffffffff47}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x34}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000001240)={0x1, 0x0, &(0x7f0000000080)=[r5]}, 0x1) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x801) 20:53:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000140)) 20:53:42 executing program 5: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68e71ac0"}, 0x0, 0x3}) bpf$MAP_CREATE(0x5, &(0x7f0000000100), 0x7e) 20:53:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x3, 0x2) [ 578.228059][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 20:53:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x800001a4a, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0x40000000, 0x0, "78feb634f42aacfcd03a52dfedaf3c222441568ade2dd3b5df0400646b9b38ad"}) [ 578.297030][T12362] x_tables: unsorted underflow at hook 2 [ 578.377412][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 578.381228][T12362] x_tables: unsorted underflow at hook 2 20:53:43 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x8, 0x6, 0x0) 20:53:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, &(0x7f00000000c0)=[{}]}) 20:53:43 executing program 3: r0 = socket(0x23, 0x2, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000141) 20:53:43 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)="c8a7f675c30bbbfd3bad79a42e1161840636e24733365489ea2105f0943aaf1784dc0f35969ce5c55d7ca2612b36d962e4d3b1c86605f947534c072a4e840ff46c0c97e9886b8572ac89b9fd0335c034c86e2ed2df38a61f7f0e056b14", 0x5d, r1}, 0x68) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000180)=""/153) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setsig(0x4203, r2, 0x8, &(0x7f00000002c0)={0x3e, 0x789, 0x3ff}) 20:53:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname(r1, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000024000b0f000c00008000000000000000", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000008000100716671"], 0x2c}}, 0x0) 20:53:43 executing program 2: getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x20}, &(0x7f0000000040)=0xc) 20:53:43 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) read$usbfs(r0, &(0x7f0000000040)=""/147, 0xfffffffffffffe18) 20:53:43 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/147) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x84000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f0000000100)="d93e1f5d36d9848541015ec05b48c08e4da6f03c8179553222a4270079682aaccaf6841026c1debc3bab632cef3b84ea1bb040f2cbd8fad8100e0e4124f632c8867a8024c82aaab10fb232f7c080df9bffd4ead1eb02dedc91308617b43ab59cc35c3b5500676925cb6e630fec76de81e361ad12fd1b122456d604eb5e4b893f56d5fc4186dcf7900941a19c19012c1d391cdbb17a9c0b2d6d9a9d5d4081313140c072e361e1867dd917a455b3acb23f5536db649005a761c458fef6f5956e24acbbd4bff3603cc49bcbca96cc6cee8b04", &(0x7f0000000200)=""/196, &(0x7f0000000300)="44db149306995c1164444d03e60f325546b600110e42a2d3422cb9e7523036dc7c3a7a6bc6dfae620068f9fd6fac0b4f6b5ea76e3b8ab33c5955fa7c06ebbdf6701300812ab9eb9a7e5ee363ea7ff41ff4df98", &(0x7f0000000380)="d793ec27bc6b14eab1095c0c2650e02295219624d1db0b3dafcb63ed4bd577d946fdc9dadb6c01c01b4e50d251b6bea599b96214f5d78535a83f75dc82284a88a45e491104be", 0x8, 0x1, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) pipe2(&(0x7f0000001240)={0xffffffffffffffff}, 0x4800) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000001280)={0x8c2, "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"}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000300)=""/47, &(0x7f0000000340)=0x2f) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x104, r4, 0x801, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb5c548c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7db8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9697}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9958bd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d32c058}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b1ae210}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79b189}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1af1e531}]}, {0x4}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ea56a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a60da9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x612a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73b820d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2175b114}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd258}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x534d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b2a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd85b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x879f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc3e}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x40050) [ 579.181995][T12382] x_tables: unsorted underflow at hook 2 20:53:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_gstrings}) 20:53:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1d, 0x0, &(0x7f0000000100)) 20:53:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x7f}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:44 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfaab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x422000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000240)=r3, 0x1) 20:53:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5414, &(0x7f0000000080)) 20:53:44 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xffffff85}, 0x8) 20:53:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x541b, 0x0) [ 579.915991][T12388] x_tables: unsorted underflow at hook 2 20:53:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) 20:53:44 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) prctl$PR_SET_UNALIGN(0x6, 0x2) 20:53:44 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) 20:53:45 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000000)=""/21) 20:53:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xc, 0x0, &(0x7f0000000100)) 20:53:45 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:53:45 executing program 4: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000000dfffea00000000"]) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) kexec_load(0x6, 0x8, &(0x7f0000001500)=[{&(0x7f0000000180)="d08aa5417a0645c3f113c2239904c4d81f370cdf44b3d3ca93420745c8ee1e070a67e6b6768f18509882a67754468586ed86fbb0649ddbe5c89e922dee514d93812faceb3102ccf141d5997f667e85f4ca0904fbd3cc9b3a6e1a83b41db62692bd07fd4bb1f4593289fc2a8434531c97f4942fb2dd4691bd9be8960aaa59f7f5a377e724a9f388d60367d2490eeb1dfe869153da5f2a8787ca1d3a3128ee26261e6083f9d37b3bae54aa412476ffe4ff3b39c9c4a55e9b6dd508e5536b81853a", 0xc0, 0x15a, 0xffffffffffffff19}, {&(0x7f0000000040), 0x0, 0x400, 0x200}, {&(0x7f0000000240)="3f0e97b8996158d8c41a6005529180e785540ea7700a5fa7a166f5edf376607e65771631e433d2387a33ceae2fe9701d013b69c0bd1747a0a6d104a94bcd65cd27316690ff683e59b988fcb2480571942c641ec67fe917597d24a5a29d41730cedbf33a2e9dc023a1bf79f9f9a24152fd6a2b29c303894740f1735e47d64eebb361e7538d069a68753572da653f5a2dfe82ed09a12ea32caca29f8a7670a248fd62cfbc5928f0efc25cd9eb390e055904ad5f7d0436b6c3dd0862470239d8a59d445965f888ead5b5809fd8777529a52", 0xd0, 0x842, 0x400}, {&(0x7f0000000080)="5b9f45ad08ba5534801f11663512bbe47e8d493cc2", 0x15, 0xf62, 0x7}, {&(0x7f0000000340)="858d350e9145659797568abfdb19e9b748c66e6bf0c5aab657eb21c0d5733189d050aa1c8c80974ad6a17b20fd35e4cbd82d09145b336c0175ddc9a4f1b2e7e21f02da954ea40782ad1ff9d55ef2e2afe57429bafe8444648a1a49d820d21aa53be6041507cb09d4e083fc4df19934ab22ccb1b668af9690114cb7e5e5b97ce42ca275fb8588", 0x86, 0x3, 0x1}, {&(0x7f0000000400)="eba33439c95a9df59571fdad46cfe5472a2a3aca4c70a14ceeec901216d2dc60626e74d69ab7fb8d05dd74d6c0f6c029d20f5cae1369058aefa9915463d8406a2c24c91b76dcbe1a3d9ee5575a23c9dab3348b149bf971455dc13307aa8b5222f49977f11d1629bcc02c085e5c65b1f32f4adea789a8e3fddd943e03b61ccbe5b014bcd8af7f97c0857cb0dd3b9ce38bc4011cbf9a07ce2d57d020fb0f3df52f2feb18f19565ebb65827b5131ceb89d631a7ca114bfeb361b1", 0xb9, 0xffffffff, 0x9}, {&(0x7f00000004c0)="41c05f49c9156c899b4847cc017e19e44ab71c9b305e74e1c2154645ac", 0x1d, 0x2, 0x7fffffff}, {&(0x7f0000000500)="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", 0x1000, 0x5, 0x7f8000}], 0x2a0000) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x6, 0x4) 20:53:45 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, &(0x7f0000000040)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) 20:53:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r3, 0x8b, "2a4de345357817c14e4587d786a8fbc59eef8e0dc801da06e82e4f293ac1b93221dac27c7bf4ca6a723ae1cd6565d3846087153e17874e18f0c33981700ad7953d44b2365e5d05cd205a03b858e08303d858b58af8d83c0bd01300af12d106c2bb2dcc71c5280967e2038eb95809bb22136f4ccd685bff37774f008dbdfe504a62cb6d082a40ac16a85b54"}, &(0x7f0000000180)=0x93) open(0x0, 0x0, 0x0) 20:53:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4b6d, 0x0) 20:53:45 executing program 5: r0 = socket(0x18, 0x0, 0x1) getpeername$tipc(r0, 0x0, 0x0) 20:53:45 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) 20:53:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4b40, &(0x7f0000000140)) 20:53:46 executing program 3: r0 = socket(0x18, 0x0, 0x1) getsockname$unix(r0, 0x0, 0x0) 20:53:46 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc050565d, &(0x7f0000000200)={0x0, 0x7}) 20:53:46 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/120) 20:53:46 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) madvise(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x2) 20:53:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) 20:53:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) dup2(r0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x0, 0x4}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r2 = open(0x0, 0x0, 0x0) fcntl$getflags(r2, 0x40a) 20:53:46 executing program 5: r0 = socket(0xa, 0x5, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="84", 0x20000081, 0x200480d0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) 20:53:46 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40) 20:53:46 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) getgid() r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_0\x00', {0x2}, 0xfff7}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0xd8f, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={r3, 0x2}) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x100, 0x81, 0x800}) [ 582.058102][T12461] x_tables: unsorted underflow at hook 2 [ 582.080234][T12461] x_tables: unsorted underflow at hook 2 20:53:46 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) semop(0x0, &(0x7f0000000040)=[{0x3, 0xa7}, {0x4, 0x1, 0x800}, {0x4, 0x100, 0x1800}, {0x3, 0x101, 0x1000}, {0x6, 0x3d37}, {0x1, 0x20, 0x800}, {0x4, 0x8, 0x800}, {0x0, 0x6, 0x800}, {0x3, 0x9, 0x1000}], 0x9) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x80) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r0}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000090000000004000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r2/1000+60000, @ANYBLOB="020000200100000001dcc7f79c9f71000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x820) [ 582.254934][T12461] x_tables: unsorted underflow at hook 2 [ 582.316959][T12466] x_tables: unsorted underflow at hook 2 20:53:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x1000000}, 0x38) 20:53:47 executing program 0: r0 = socket(0x22, 0x2, 0x2) recvfrom$packet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 20:53:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000140)) 20:53:47 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000001100)=0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001140)='rose0\x00', 0x10) r2 = open(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000000c0)={{r2}, "a572318f677bac72408f67dd67e4c9840add669d0587c30abbbd154251c24c2acc7be52ec72d5d2f391d9af1c89a2583e614cfc2677892b2c81f46c009d851aaadeb18bb94204ebc8e0e73f9e5bc3300175350d7ffb5de156118a68e51124ce724da0781f420eb9dbd054e35dfb22aa8df61acfeac6961f2ebc3e15b41cbdd84a3c014ab7a4f73408c4b0da01cd1f42843aec3b3433ab3bcaba80684cc4201f6a64992911e6ed15e42314373b07799c13f87b1f09bb4ae0c45043c2311afa28c2ce9f36c363b1487d7bb522f166c8c266f9a6ea69e65dbd6108a1406cd11f702b22fde8ec9c0b2bf5056b2fe632d5a7f9009462735f634de1c86c51d185f20e5e9d82250ab669e02851d469728811b18ac35ed3a834c6af5175e9fe48a64a93c16fc88acd2b9b909270afcec878b8240394a2a5c4485ccd8dd7c2bb603fbd9c16e342a71e3feb8ac64c4e3dff2f920239bcd3af45f8928748d0f8af920611644d1812c68b6c15d33ff7be5e6d0f3d5e2d077d806a4de0d0a9fa5f8aace82fd10cd8ff8facbff872b4f04e869425630609d43a36a6b0eb5f3d31649f240a79af21b98ddecb0b2046a3b53eea8c69b279b430781372030f5f50ca5b74b4d4f92b7c58515a3ba0979917adf1b565b04319a4b5ca9f3a358363373f3dfcfcdfe1b355879022ce9084d0546bed8887d594c47880380bac7973111fb8c0156303b8aacd7e7a4f5f9f95a9f1dffe0d0fa90a0e019376a811468106c7e450eaa9709e5b14fec0f27567e3ec6de245792ef3862929614c0ba971963b1bbabc300ee454d0f24c812c9d2398418d08212baefa2a9b2108324bfb8b775fb1738f474eb227bc596cd5da2700cfc6904f4edf2dee9e62022381f32f07acb18f015bd37a81d1da25eb5a59f34020e47273997c045f406e3249d5160735db24f4b96c5f2419400de4bb6fe388ab9cb430247102fae74a8b1456c6fdda28ec86583e1e240ba12824b764b8976580cceb2fa5bda97fe78f772187284c20d1bfb65545c3a5d223889d45a600824431799c37f8094fca0c2265ee41b2c45679dc5f8ad4d43a4cb7f4ff2901a959e2899f673433fffb2cdc9fdc93389d73faaa8059fa45a23f27f9d1cccca0ca4a0bd28efe727d07524162330544cbe92ad8c31554f51f32b24a3e73a14c274a28a7a49d9b3086ea9272e48c4dd196bef47bf0718a19f96a02a191088938b32d4cf2557bafa185ecf1cf5063a27fa8308e0eeda0113c8a3d877568726fc1dabe4f1eba984f323ed0145c32a5d57ec8812ea2500daecc452ef9bbc1eb574184e0e355e2b0a16142e75b8ec61b79cac85aa5ec2b32e58528c413190c4b9793272d5269effc2c7e068c8b3348ff553c34e512e5466166d58f305a919fb88c501106c50c295464b693dc67cb353992618feca7332f80b6dd9c872d4a33ab442f7c107ddf76b07004c9cf50940f21a93fa1252b6ce1e8e0219fa8a4d016081c24f492c92492439807fbfb17ff6b1386829740048f9f45c62db079f4322325988cd4eea7cb5d9369b0e2a7ba97eef2fc318422f6a22ac5bd43f09c4d963b8f59cc4bd61e9411aa736a17f669bbab9f0a1cbf5b4e83836c3384027096726dab88a130aab5e5f2da1e0381f35c8b0b91abc10de667c0b4f5b3f9ee7eeef8a103a8220ff51e424aa19ab6ed60cdf3d66d1c5f83c0ec7edd327214e08a260da67274e6909281b6abe1c324c407e1f1b76e5dbb251a4c5a06a18b2dc9ea070d05232540969ee863063ad3ea7f0b34b9d20dfac635371dfad74e492e22f300811b331e4dc1637552dfd3c0db4eaf721494cebfaaf679faa6bc0d08be22fddaf1cc33e90df8389abc29dd1895df49288c5f9d39934d30b3aad45898eddb91cd3b87f8692c83198445f93b7dbe36f03400549913ea4fa9452197ad2e4e851cf4628cee2c0deaee0580318209e143fbb92a3608128259cfd0b9147b94b90c471e638d786baae6f967111281eeb09b54b208b562f0548a6b73790b47cf3d36344d9b0ebcedc31b368e0c6e40264ad480e1c384fed53ee0f4710ec3c4cb8410f0026efc6f95cf8cc0c341fa7ce40801e259867158f22d271ea17f66bd2e4d625b7d5a74173038796438f6f245e3ba0dee3639b2eaa1edc1b5314870b4f7190968b706a5294f7fb7288cf0bb88af9c057e71c6ac850dd6a8774fa085b568f9af61c88e602c51e6c848d3da92d87b1f3aae2113f121601df31b1de11d90b297c639dab844dbfd4aaa123cdcff491f3cca436cf2651a69e9092a5cb3c6b0090a45643a77aba8b8800acd78cbd217b1e81de5b10384362dcd33064af76921b39999e8cbdf22523d172522e4630cbc8390a41436797703fb02faeb890656d8af9f3a8f96d52e5dffd5433236d11c7508a1d4e0dc2c8dfaee61f611d8b8d21b9426d712172d52debb1114ff9882a9372ed37a8aabadfdf67c551acb4446ae3df0f6789864c72209fa22c7dd04944974c0a040bee678fc1fe84e1ed134edecb64fd228ece6e73d6b1ca1e2eff77bea0b7be489d75c9d63b188d33093975a333dad90263b8c2849117bae792a3dfb8258ea3cf191537ffccde7770104a2ea8c1e06450931bb3647166206acdb7e241bf17b21930af3acc63fa22281b80d142b4867323fcac4783583682b5c8e8d2c87978b57b9b778cf366b43bf09f56434c8eac5d4d5e8d78d376d4415f5cdb264d471b782d2b2752b6c5be57a47e8ddc8bb959a5f22615fce71e0307e2c7f218231c486e68f6e9feb6e32383f7e8853de8e3ab39dcec953691aba08c9400b921a3adc0cd812904c5d25756114e0e5b8acfe4de03b2a88ee391669a1535e81ec56c88cee8c4b2a912a2a225e849e4b460fec08a1f6e48e49e535d9e2f374aced933e12f114531aa07bd60299fda653fecb40b58f9cd48c4648fd09711593f3d581d71735af828fb1fd713b4e92cd1a9994b8b0a64c887efbc7873cf650eb3a0b95307fd804333f7b7e20e90433bbee13eee9031a849a5a1198d615af694b1eb8b89ccae47ca0a181610d436a00a29c2f12e1f0812ab97245e8fb98420bf7eddff71d440a0083070cc8aea78b372113aedff587198dccbd7aca0769a69f8c84c5cd11cad254929f63b4d8dbc949a87932f8323adecc4ac9d63b9426c2330cf75435e63022d1737fccd79f38773bdf9b030b4bee7596c0ee6f6eaf528c8647c548b55971ee944f6102653d116c9c4ed788333f781c191be20fcf7829f7a1b6c51c6274e4ba86e7b0bad7e0144be9055d55bfbec239c8367a37f34a9123aefd3ed6a7f26f990a17703a444f695e9be0e83a83bfc80dbe47e746e4077b6e066fd1bee3097950e6fb7ef7e7e77f7b05222027f84b704200e12a26a8d93d8ae723b35a0dea54f7946bf6e7754a6ee8effce278ebe64a6b0aa83cc9ca8278e1d33ad087b16bcc2d72bc0ce242a6d30f5310aac85c15238913423e3d43ef10ae28129f37bad170b8bc88b06a3109a98c385799a8e11588fd021f67079948310715c825a5ba8fbd828883c3990c96d7d5dc28612c1d20bc14f8ca5afd0444e34e7cf991ffd77cf37158594609dbca94dcc46f159e045af3d101059f2f74457d8f891b6059ba07c65e9b87abdd6e01b059662a0a93aa9d387279403b19c581e8dd9be4a777808bcbaa5c5872d76d78bba60484a5ebd4e5e29ab39305b950ade0ccad1dcd4f0300ae4458e8e911710655fffc41b5d19afbbb60356545642dc1ca62ffa20fc3560b4c94951b9195fcbb632b314b127eaac379f1cc20a23fe48ecb747cd3d27440032be9ed9a5a2a4b05c11bbefdd46530621218b5e1a7d4797f9d23fa9d1c3008cbfd27cc52bdbc5e2ce3545a06367e20cdebf543069a593046a912c757005245abf9f5adb3a0c814dca241b9b1e73887bb10d83c0ad9ac8494e8d3ddb9f86839512acca80fc723ababc02a6f90a861f56e96814e05c40001357134695934e2afcf2d4863a06953f8501eb727f24e688bf4d682a9655dd76184c3e3565d7e4089eab019f5f91d02b8fe0924ad26f7a2b37f01627b4ac7e176cff541fdd9dd6b4546d476ea14957ae6621a8d0b84a6007e7b2cc7604ae8a8899afdf7a6b16e18568fa63247e6201d44320db3784d07cf82284504cb0f5394e08ddf12186021ba710a5c74094c5ae68f5ded5755651e56341810da31d4e13e21b663d77b90acc77eb9b2f90424e98fbbe8ea92562ab5148b891dfe18e67966858bb7da781d60446875b5805139fe1f939f2f990fa9cffc48800704adea7d7b5a9dce758c8a4998a453d8838448fd2c4357a44bf47882548d6cea3e0ee63d0b02bc49f83d0ed863436617430a0e600519bab1a98c030215f828cc3f67caa802ac3957347f5d9808f849776f167cfe6a7e396aa01bc7899b61460fb8d440f621579c3c862e3f26cf2fb6f059bbb14493bc1b9cc9b10367d1b63917d58c793419c053e193987bde500834d9c85f0c1856aa39f46421b15518b59ef22f82830fe5af3d1fa9982fc4984b4dd2a16d4dd6b10d9c33e3a6ce5bf6a053a500071ef5ab94701a9a7512a41166e26c79c31ae6624487a65029317247b32a29f86e59890751865bea4465ee0b1fc81da319ba7c6611f8b6e9158a8c0b07e26781b0f379e2ae5f13ac6ce22e1fff6479f49ef804c8711ba98d7360ff8a0ab66c8e753c2d669be08baed910a88b207a84a680cc929b37e610a3fe638cf9313f6b6a59a457a05bb2cd89009c5547c1e22e79e31892ccef4e7b10e666962fb40911b369f019730f671d385a142fc2fc9c02a7c89b6491cd27b6ac16c6a11c3db6383e6f8fc155d92d400612e5f60790e3818b75f5dd2c69df1b0995d6d46a44dec7732dbce379eb7e2d5ac1aff1ef0375a8e828af95b8d3b861ccd08fc288075ca04dec352f5d70f2ee21cd7429914d74da8f14ac89ec0daefd261f1b13128c93a9ccb4abc3700d328f5d118749c8c7696c61de8e66dd395f39d4275c25603364dcd8b26d4f6ce3f11adf5937350d15545670de0bea09308bb679117b485228004eabc98036368ee4e3251e20287e33bdbf70b36ecbd95f8682d1c99e2534044e68ad9cfa231826efc088b16ea7f57ee6bfbca457b3eb4f8b5bdd32d0889dd7c8f6cc546093ed5abdc4079b200f3a739c9ca60c671c6cdab3b301a0ec78ad2fd6ca118df5a6675e171ff3aaff39e4824509423ccf84db108ad6dc0914fbee306d12f9562df87965c1038a673defcca3cc4dede01c1761b3462e39124b3b5325032e7d391ec0ed45003e800bf75ee23f07a66c0f30d8eb791dbc9f353555dfda655a570848b65a4fff328591ed7b2b57565bf8d8cd027da9f1a6b10e76afff57c998eee4de64161a5908d1f3fbe470be06064a16991e5d0927d4b19da53de550ba546d9fd3b77e795b163b9bb59cbf34948a01c6afe28ace25350c568067dba85da62dca4c661d6fbb60c747b7a9350c21e1725819603510ddd8d6034d69bfd7e67860b01e3a524a5327b8cf50e077f241cd95c469291508f43b37689aaa09f0d02b11d229ddb85d56529c125967a917b48d5ade1090de5d6ecb1e5737e86b13edbf52e6947fe09dee13d7685e6cbdd05ed6f611f8eae7c7e0d1f9e0fd5d93c5b57fb7de099f26d8c08e784d421e27ef37aaf7189da08e150bbc5556ad138ca8773605ebd096a208b913df752b4cf6b36be0d05cd57520295af8d86c6647b00a2ed979a5bc46edfbd75c68510055a36500b1b19e7a9747ce7c15d951b673fbcd6e43f27"}) 20:53:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x200c4055) fcntl$setstatus(r0, 0x4, 0x0) 20:53:47 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x20, 0x6, 0x73, @mcast2, @local, 0x1, 0x7800, 0x9, 0xb8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r9, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x18c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) 20:53:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="570000008100000000020a"], 0x20}}, 0x0) 20:53:47 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c4042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 20:53:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x800001a4a, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x3}) [ 583.090722][T12486] x_tables: unsorted underflow at hook 2 [ 583.129726][T12486] x_tables: unsorted underflow at hook 2 [ 583.165864][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 583.222055][T12494] device syz_tun left promiscuous mode [ 583.228865][T12494] bridge2: port 1(syz_tun) entered disabled state [ 583.271566][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 583.294810][T12494] bridge3: port 1(syz_tun) entered blocking state [ 583.301740][T12494] bridge3: port 1(syz_tun) entered disabled state [ 583.311250][T12494] device syz_tun entered promiscuous mode [ 583.322394][T12497] device netdevsim0 left promiscuous mode [ 583.329064][T12497] bridge2: port 2(netdevsim0) entered disabled state [ 583.362520][T12497] bridge3: port 2(netdevsim0) entered blocking state [ 583.369504][T12497] bridge3: port 2(netdevsim0) entered disabled state [ 583.378704][T12497] device netdevsim0 entered promiscuous mode [ 583.385723][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 20:53:48 executing program 2: ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/152, 0x98) open(0x0, 0x0, 0x0) 20:53:48 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x2}}, 0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x1ec08e2cdd8ab572, 0x0, 0x7}, &(0x7f00000003c0)=0x18) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:48 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x5, 0x0, 0x0) 20:53:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) [ 583.603471][T12494] device syz_tun left promiscuous mode [ 583.610007][T12494] bridge3: port 1(syz_tun) entered disabled state 20:53:48 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x33, 0x0, &(0x7f0000000140)) [ 583.680362][T12503] device netdevsim0 left promiscuous mode [ 583.686927][T12503] bridge3: port 2(netdevsim0) entered disabled state 20:53:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x403}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x2, 0xc000000, 0x50a1, 0x3f, 0x9, 0x5, 0x3c4c0000000, 0x9, 0x3, 0x6, 0x6, 0x1, 0x1d2, 0x1ee, 0x3, 0x9], 0x2000, 0x20840}) 20:53:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x882302, 0x0) close(r0) 20:53:49 executing program 3: r0 = socket$rds(0xa, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x29, 0x39, 0x0, 0x0) 20:53:49 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r2 = open(&(0x7f0000000180)='./file0\x00', 0x385002, 0xc) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044004) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/137) 20:53:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socket$nl_generic(0x2, 0x3, 0x10) 20:53:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'veth1_to_hsr\x00', {0xf5b}, 0x7}) [ 584.634637][T12539] x_tables: unsorted underflow at hook 2 20:53:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @empty}], 0x20) 20:53:49 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0xe, 0x0, 0x0) 20:53:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 20:53:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1b, 0x0, &(0x7f0000000100)) 20:53:49 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000013c0)=0x101, 0x4) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/116) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/180, 0xb4}, {&(0x7f0000000000)=""/6, 0x6}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000780)={r4, 0x7ff, 0x4}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001400)={0x0, "ca460ae88188f1d12e79e8f401fbd982"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002400)={0x8, 0x3, {0x9, @struct={0x1c4f, 0x6}, r4, 0x9, 0xff, 0x101, 0x2b, 0x8, 0x21, @usage=0x7f, 0x5, 0x5, [0x8000, 0x6361, 0x7, 0x1, 0xeb, 0x7]}, {0x269, @struct={0xfdae, 0x80}, 0x0, 0x800, 0x10001, 0x10001, 0x6c, 0x2, 0xd, @struct={0x200, 0x94}, 0x9, 0x6, [0x8e49, 0x7, 0x48, 0xfffffffffffffff9, 0x7, 0xb4c]}, {0x800, @usage=0x9, r5, 0x400, 0x100, 0x9, 0x8, 0x7fff, 0x22, @usage=0x4d8, 0x9, 0x101, [0x3, 0x3, 0x4, 0x10000, 0x4, 0x1]}, {0x3, 0x10001, 0x4}}) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000240)={0x8, r6}) 20:53:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae07, 0x3) 20:53:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f00000001c0), 0x25) [ 585.367608][T12541] x_tables: unsorted underflow at hook 2 20:53:50 executing program 3: io_setup(0x800, &(0x7f0000000040)=0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 20:53:50 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x620240, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) 20:53:50 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0x0, 0x6000000000000000, 0xfffffffffffffe13, 0x0, 0x0, 0x0}, 0x40) 20:53:50 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x80047437, 0x0) 20:53:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x8, 0x81, 0x53}, {0x7, 0x20, 0x4, 0x3}, {0xfffe, 0x4, 0x8, 0x1}]}) open(0x0, 0x0, 0x0) 20:53:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc050560f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b715e5ec"}}) 20:53:50 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/119) 20:53:50 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x31, 0x0, &(0x7f0000000140)) 20:53:51 executing program 5: r0 = socket(0x2a, 0x80002, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x2a, 0x0, 0x0, @local}, 0x10) 20:53:51 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000040)=""/109) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) 20:53:51 executing program 1: ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000400)={0x101, 0x5, &(0x7f0000000300)=[0x2, 0x7fffffff, 0x8, 0x3, 0xabd], &(0x7f0000000340), &(0x7f0000000380)=[0x6], &(0x7f00000003c0)=[0x0, 0xa46c, 0x95, 0x3, 0x2, 0x77c25bdf, 0x401], 0x0, 0x1}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x642241, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'hsr0\x00', {0x2a, 0x1, 0xbffe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x3f, 0x4, 0x8, @loopback, @loopback, 0x1, 0x80, 0x6, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250b0000002000018008000100", @ANYRES32=r1, @ANYBLOB="140002007600000000000001ff00000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x42000) 20:53:51 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8, 0x800) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000000c0)={0x6, "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"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:51 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x72, 0x0, 0x0) 20:53:51 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="2b530000000000000000070000000800030089"], 0x1c}}, 0x0) 20:53:51 executing program 5: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xd, 0x0, 0x0) 20:53:51 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x128) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000180)={{0x5, 0x0, 0xfff, 0x7, '\x00', 0x2}, 0x1, [0xff, 0x3, 0x6, 0x4, 0x4, 0x7, 0x10000, 0xfffffffffffffffd, 0x9, 0x3d3, 0x7ff, 0x4, 0x4, 0x7, 0xec, 0x0, 0x400, 0x5, 0x9, 0x6, 0x9, 0x1, 0x2af, 0x5f6, 0x55, 0x10000, 0x3, 0x200, 0x800, 0x5, 0x9, 0x5, 0x10000, 0x9, 0x1, 0x7fffffff, 0x7, 0x5, 0x80000001, 0x9, 0xf4e, 0xffffffff, 0x5, 0x7, 0x401, 0x1, 0x2, 0x0, 0x9, 0x5, 0x101, 0xf84, 0xff, 0x4, 0xd7, 0x0, 0x8000, 0x0, 0x1, 0xfffffffffffff801, 0x6, 0x1, 0x2, 0x10000, 0x4, 0xfffffffffffffffc, 0x774, 0x6, 0x5cb, 0x2, 0x401, 0x9, 0x3c0c700f, 0x2, 0x3, 0x5, 0x100000000, 0x2b1, 0x5, 0xffff, 0x81, 0xa5c, 0x400, 0x5, 0xd2, 0x9, 0x5, 0x800, 0x7, 0xffffffffffffffe0, 0x7, 0x82, 0x8, 0x2, 0x3ff, 0x0, 0xffffffffffffff01, 0x40, 0xffff, 0x7fffffff, 0x8, 0x7, 0x8001, 0x15c4, 0xffff, 0x7, 0x7, 0x4, 0xffffffffffffb204, 0x80000001, 0x2, 0x2, 0x400, 0x3, 0xfa1, 0x1, 0x1, 0xaaa, 0x8008, 0x6, 0x1ff, 0xdd5, 0x7, 0x5, 0x0, 0x7c900741, 0x3b53, 0x9]}) socket$pptp(0x18, 0x1, 0x2) 20:53:51 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) 20:53:51 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x13, 0x0, &(0x7f0000000140)) 20:53:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000100)) 20:53:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) open(0x0, 0x0, 0x0) 20:53:52 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0205647, &(0x7f00000002c0)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b715e5ec"}}) 20:53:52 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x8}) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040)) 20:53:52 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/140) 20:53:52 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0189436, 0x400000) 20:53:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000000)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x24}], 0x1}, 0x0) 20:53:52 executing program 5: iopl(0x3) membarrier(0x4, 0x0) 20:53:52 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0x79, 0x0, 0x0) 20:53:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), 0x4) open(0x0, 0x0, 0x0) 20:53:52 executing program 1: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x88, 0x1403, 0x400, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0xd7dbe453c91be775}, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:53 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000034c0)='/dev/snd/seq\x00', 0x52000) dup3(r0, r1, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x86, 0x0, 0x1, 0x80000000}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2, 0x1b, "d204e0c46e6ca8067f650ef36382d9c23c202beac00e39cf0b9e91"}, &(0x7f0000000180)=0x23) 20:53:53 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="066be56d00"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 20:53:53 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x5411, &(0x7f0000000e80)) 20:53:53 executing program 0: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 20:53:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0x4010ae42, 0x0) 20:53:53 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/153) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x87, 0x29, 0x1, {0x1, [{{0x20}, 0x6, 0x2, 0x7, './file1'}, {{0x80, 0x1, 0x2}, 0x3, 0x6, 0x7, './file0'}, {{0x10, 0x3, 0x8}, 0x1a82, 0x0, 0x7, './file0'}, {{0x0, 0x2, 0x2}, 0xef0a, 0x3, 0x7, './file0'}]}}, 0x87) 20:53:53 executing program 4: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffd, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x5) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/155) 20:53:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 20:53:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0xac, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x1, 0x8}, @fd, @fda={0x66646185, 0x3, 0x2, 0x13}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @enter_looper, @clear_death={0x400c630f, 0x2}, @increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1400}], 0xab, 0x0, &(0x7f00000002c0)="c4ff8d00d96336b1942ac0d99328bf0ee653d2a9f39dd14287553c899c48289109ad89e5827691aff1a50ab64eceaf991d394aa0cc89eb947cda5944717e237a485c536bf972cf00505fabe829b81454b39e3c6cabd035fa6888ff56cb7289b7f1d8f9ea8aea4c95cfdaa9eaf9eada67263e1823bc6fdac3f80cf51af9621c155f08a8fe292280d091d765ba2db3c93f337c5569b4431997702ca49fba3263947a76914b4a665f8c948bf7"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:53 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 20:53:53 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/136) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000008b4a8e87574a3bbb69ca925b8d0688c29f80cac3d199b350e74cdea3481b96392787dfe490bb8b028d193b96cdd9da4d9c5c071c2e94d1a3ca24f2722fdd8a7a9b17819d15931e13de14414b2396e5a3378dce9e186a254c3205a03c46acb1cf893a4657908cd20e4f69462506", @ANYRES16=r1, @ANYBLOB="2b0f000000000000000067000000050013010000000047ff1200000000000500e400000000000500e40000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x251}]}, 0x1c}}, 0x40409c5) 20:53:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3cd1, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000b, 0x12, r0, 0x10000000) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 20:53:54 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x480000, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000001c0)={r2, 0x7fff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10600, 0x0) [ 589.327358][T12675] x_tables: unsorted underflow at hook 2 20:53:54 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket(0x1, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/50, 0x0, &(0x7f0000000280), 0x0, r1, 0x4}, 0x38) socketpair(0x2, 0x0, 0x73, 0x0) fcntl$setstatus(r1, 0x4, 0x6000) 20:53:54 executing program 0: r0 = socket(0x22, 0x80002, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5450, 0x0) [ 589.655399][T12686] x_tables: unsorted underflow at hook 2 20:53:54 executing program 2: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f00000000c0)={0x80, [0x800, 0x7, 0x1], [{0x184, 0x20}, {0x0, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x2975bf16, 0x1, 0x1, 0x0, 0x1}, {0x1f, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0xffff0000, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x10001, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x8, 0xae, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x1c, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x52, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x0, 0x0, 0x1}], 0x4909ed7c}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0xffff}, {0xfffc}, {0x6, 0x0, 0xb2, 0x50000}, {0x1f, 0x4f, 0x4, 0x1}]}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) open(0x0, 0x0, 0x0) 20:53:54 executing program 1: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x10000800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000001240)={0x1, 0x0, 0x3, {0xd8cb, 0x8000, 0x100, 0x1f}}) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x40, 0xff, 0x8, 0x7f, 0x0, 0x3, 0x20002, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x1f00000000000000, 0x20}, 0x2, 0x3, 0x7, 0x2, 0x7, 0xc0, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001280)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000001c0)={0x17, 0x7, 0x1, {{0xa, '.)\xb1[-}^]]&'}}}, 0x17) [ 589.707578][T12686] x_tables: unsorted underflow at hook 2 20:53:54 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xc0189436, &(0x7f00000000c0)={'team0\x00'}) 20:53:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc) getsockname$unix(r0, 0x0, 0x0) 20:53:54 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x1, 0x1f, 0x3f}, {0x3ff, 0x9, 0x40, 0x7ff}, {0xfff, 0x2, 0x0, 0xf731}, {0xffc0, 0x9, 0x0, 0x8}]}, 0x10) 20:53:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x800001a4a, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x1}) 20:53:54 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="f21d8bd8a663ed9dc80c74d1173a384e5bd0c6bc2c7ed6699f6a8970ac5b46f550246148d495b5993addffa8d32b2deca8885582e0f67bf20871548dfdb3d06a444ff0fbd1fdccbe7a715669ea2f332875a1c30261ba7e2c2a6c44c0b2487e9761a3aa41c90ac21e9a35292d4be2e275927c6f5de28b5585564459e80efe48c1192c9a28f6fe75be578642defe9ab56c47e7a60dafd33181357fe84b0483dff60d4b4c500829f8f0ee3605460a680024ad36720f94af9b7a02c75e8a1e51d842a79802d4") 20:53:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/216) open(0x0, 0x0, 0x0) 20:53:55 executing program 3: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8922, &(0x7f0000008d00)={'sit0\x00', &(0x7f0000008c80)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @ipv4={[], [], @remote}}}) 20:53:55 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="76a57ba959faeca7d2ccfca0e7008a8ae65f53517dc40ace0e6706d49a28f629b21497afed5f06625daeea2478a176da9ce5258c283b9d2f0d701cd1a0f9a369c416c30002cadee0bf6029e8eaa262d5c6223d6dc1321ca540265d25d50cb0dcd7ff8ea2532e399bb5c45c77a161bb9420791b3f442e9612831e130a5ced5a3b7768843cb9b4504d1856c4c0f14319120b4296fafbba93f3a4e6203e914072c8caf095eae50ffaa81bcfeda94ae5728deb5f1e000e09b0ec364ebca498a4d57794cf22d7c4d9cb55ab8f73dd9403036589ca8ac8") 20:53:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:55 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4b, 0x0, &(0x7f0000000140)) 20:53:55 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/145) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) [ 590.674566][T12718] sit0: mtu greater than device maximum 20:53:55 executing program 3: modify_ldt$write(0x1, &(0x7f0000000000)={0x2000200}, 0x10) 20:53:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x3) 20:53:55 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 20:53:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x22) 20:53:55 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xb, 0x145102) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) r5 = dup(0xffffffffffffffff) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000001240)=""/146) 20:53:56 executing program 3: socketpair(0x0, 0x181a6a373c3415a6, 0x0, 0x0) 20:53:56 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x50201, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000680)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/194, 0xc2}], 0x4, &(0x7f0000001740)=""/160, 0xa0}, 0x12000) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001800)={0x188, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xe1fe}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x400}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xbc}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xfffffffb}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0xb587}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0x8000}, {0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4040004}, 0x40400c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) time(&(0x7f0000001ac0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r9, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r9, 0x2, {0x2, 0x0, 0x3}, 0x2}, 0x18) 20:53:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 20:53:56 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x400000, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) ioctl$TUNSETLINK(r1, 0x400454cd, 0xffe5) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) clock_nanosleep(0x1, 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)) 20:53:56 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x400448c9, &(0x7f0000000200)) [ 591.794314][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 591.845111][T12755] bridge4: port 1(syz_tun) entered blocking state [ 591.851874][T12755] bridge4: port 1(syz_tun) entered disabled state [ 591.861594][T12755] device syz_tun entered promiscuous mode [ 591.909975][T12749] bridge4: port 2(netdevsim0) entered blocking state [ 591.916945][T12749] bridge4: port 2(netdevsim0) entered disabled state [ 591.926720][T12749] device netdevsim0 entered promiscuous mode 20:53:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8010550e, 0x0) 20:53:56 executing program 3: r0 = io_uring_setup(0x1a42, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x5, &(0x7f0000000100), 0x1) 20:53:57 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x30000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x3, 0x0, 0x8, 0x7}, {0x1ff, 0x1, 0xf, 0x10000}, {0xb82, 0x2, 0x6, 0x7fffffff}, {0x3, 0x0, 0x27}, {0x400, 0x40, 0xff, 0x1f}, {0x600a, 0x81, 0x6, 0x6}]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x80045301, &(0x7f0000000180)) 20:53:57 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000180)=""/198) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/152) 20:53:57 executing program 5: r0 = socket(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000080)) 20:53:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0xe7, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:53:57 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x5421, &(0x7f0000000280)={'sit0\x00', 0x0}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:53:57 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) recvmsg$qrtr(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1, &(0x7f0000001240)=ANY=[@ANYRES32], 0xa0, 0x2000}, 0x38, 0x1) clone(0xf4320d798cf92fdd, &(0x7f0000000180)="e7a2afff44207c272b26429752fdf321d47ad2fa39239a2bd0d5515f44c309b5d5edf1da6a5f4628c023cd2c4dd7306f6974e31058a061d0844c2ba03613db0cd0c859658080cb9c502e71e43e2b43b65da20505eedb5f1d38cc35d46676b1e153aeb542e32900678f4f842c4e751b388daa297ad091cf93e57a20aaa7f7defb8907e3881895256e2362b03df6e90b5dda627b23b7cf0ecaeab2155e8ce2eed4c9e3cc12d9b3ab4019988c5ab735ac8dcfbfcfbb02b2a7bdb1e6e1306fc125110f27b47ec1b301b31c71c14f5170d449bad4f7510a4baea88993cabf79d43245661919d799da85c9bdb7ad46139e", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000280)="311195b68f1940f9df9f5ec5be8e933da92bdaee49ae36f43f2b5909f31a551bd7e79674cf05621f685bceaa47489a48bc9c1ba3506797c880fae29f52aab50f95ce5c63") semop(0xffffffffffffffff, &(0x7f0000000080)=[{0x2, 0x3, 0xc2374e8435e371f9}, {0x4, 0xb2be}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x800}, {0x1, 0x9, 0x800}, {0x7, 0x9, 0x800}], 0x6) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000001440)=ANY=[@ANYBLOB="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"]) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280)='/dev/nvram\x00', 0x4c0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001400)={0x2}) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r5 = socket(0x10, 0x2, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000001380)) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xfffffcd8, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0xc1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, r4, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000001700)=ANY=[@ANYBLOB="09103a20", @ANYRES16=r4, @ANYRES32, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES64], 0x64}}, 0x4000001) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000016c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008040}, 0x40800) 20:53:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/168) 20:53:57 executing program 5: r0 = socket(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f0000000080)) 20:53:57 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x21, &(0x7f0000000040)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) 20:53:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/120) 20:53:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0x6, 0x1, 0x7, 0x8, {r2, @in={{0x2, 0x4e21, @multicast2}}, 0x3, 0x4, 0x80000000, 0xffff}}, &(0x7f00000001c0)=0xb0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:53:58 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) 20:53:58 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x80047453, 0x0) 20:53:58 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/140) 20:53:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101}) timer_create(0x2, 0x0, &(0x7f0000001500)) timer_settime(0x0, 0x0, &(0x7f0000001540)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001580)) 20:53:58 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:53:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840)='/dev/cachefiles\x00', 0x88080, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000880)={0x0, {{0xa, 0x4e24, 0x44d, @private2, 0x8}}, {{0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, [], 0x41}}}}, 0x108) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x1e8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @initdev}, &(0x7f0000000580)=0xc) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0)=0x2, 0x4) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7a7) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", ""]}, 0xfffffffffffffcc7}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r3 = syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0x3ff, 0x880) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x275) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x50d000, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000440)) r5 = accept4$inet6(r4, &(0x7f0000000240), &(0x7f0000000280)=0x1c, 0x800) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='xfrm0\x00'}) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x3) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000200)) 20:53:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) open(0x0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) tkill(r1, 0x2c) 20:53:58 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$xdp(r0, &(0x7f0000000080), 0xf) 20:53:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000640)={{0x6}}) 20:53:59 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe8, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x22f}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf1d4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0xc000001) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) [ 594.534864][T12821] x_tables: duplicate underflow at hook 2 20:53:59 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x8913, &(0x7f0000000e80)="9a693a") 20:53:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7b, &(0x7f0000000140)=[@in={0x2, 0x0, @loopback}], 0x10) [ 594.633792][T12824] x_tables: duplicate underflow at hook 2 20:53:59 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) 20:53:59 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ustat(0x1, &(0x7f0000000200)) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x8, 0x7ff, 0xffff}) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000180)={0xfff7, [0x4, 0x6247, 0x4, 0x2, 0x7, 0x8, 0x4, 0x2b76, 0x3f, 0xffff, 0x27, 0x20, 0xa1, 0xff, 0x9, 0xd5de, 0x800, 0x1, 0x101, 0xd6ad, 0x9, 0x1, 0x4, 0x6, 0x9, 0x2, 0x0, 0x3, 0x3ff, 0x7, 0x6, 0x9, 0x7, 0xff66, 0x1, 0x8501, 0x21, 0x2, 0xfff, 0x6, 0x79bd, 0x401, 0x100, 0x1, 0x7ff, 0x8000, 0x1, 0x8], 0xb}) 20:53:59 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x0, 0x2, 0x6}) 20:53:59 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0xd4138f26c4705c58, 0xffffffffffffff9c, 0x0) 20:53:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) 20:53:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x8, 0x20, 0x7, 0x5}, {0x5, 0x80, 0x87, 0x5}, {0x9, 0x57, 0x1, 0x36}, {0x6d4, 0x2, 0x2f, 0x6}, {0x7fff, 0x1, 0xd6}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x3, 0x7, 0x2, 0x101}, {0x800, 0x40, 0x3}, {0x0, 0x9, 0x88}, {0x5, 0x5, 0x1, 0xa27}]}, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x8ac, 0x6, 0x2044, 0x553af2b6], 0x5}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) open(0x0, 0x0, 0x0) 20:54:00 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80108906, 0x0) 20:54:00 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], &(0x7f0000000000)=0x1008) read$char_usb(0xffffffffffffffff, &(0x7f00000012c0)=""/243, 0xf3) 20:54:00 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000180)="1411599508f8253a11b0e5060d30b7f32dbfb3eb557401c604ae33f73d93f065f6ce28a841d7d8c218561462731c8678b3253dd4786ac4f59cc0d6568b766eebd307e2ecde65d8688d54dcdc65f5e1494b496eaca8d60b6fda18a82c87a4c00d56e227744d6ee7a3885cbb9bd70f86506178958d4286b8f53b3e2bbdc1184af4626bb21d2376bb09682cf1f27db16d1dd5179e97416a523f676bf2f88de287ec307d31e1d5a25e6009") setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000)=0x6, 0x4) 20:54:00 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x29, 0x0, &(0x7f0000000140)) 20:54:00 executing program 5: r0 = io_uring_setup(0x28cd, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x20c42, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x40086602, 0x7fffffffefff) 20:54:00 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0xc, @raw_data="3934408a341c98e1f469372731dd0988f776edff8445cb4743552cf6562cb4097b3aa9486961a69c3cf23ce6393043f63066dd58f99eb66af475aa5360d6b84de7b2765363b89fc875f42f1af4aa91796d7148434c64817cf1058c6ae5499681c85fadabf6914008b28eab14fd46ba0b4d671abdc888b3a34aaadee6965eec6fac6e644e8360c7704eb8a17cab2578344888b54029aaa9dd5f6c7ecf04b8ae273ea83c9606f36e5cc557fcca5a9f8a5d077a97104fce0aff0b81c676ae00f1a6359619f018a89e5f"}) 20:54:00 executing program 3: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x140042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 20:54:00 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20a240, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000100)) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)) 20:54:01 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000001c0)=""/122) 20:54:01 executing program 0: r0 = socket(0x1, 0x1, 0x0) getsockopt(r0, 0x1, 0x11, 0x0, &(0x7f0000000140)) 20:54:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x15, 0x0, &(0x7f0000000140)) 20:54:01 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x9, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000002c0), &(0x7f00000000c0)=@udp}, 0x20) 20:54:01 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/113) semop(0x0, &(0x7f0000000180)=[{0x4, 0x6, 0x800}, {0x2, 0x1, 0xc2968f2a9475034f}, {0x2, 0xffff, 0x1800}, {0x3, 0x2}, {0x3, 0x200, 0x800}], 0x5) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/162) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x1e, 0x0, [0xfffffff8, 0x101, 0x6, 0x8, 0x7fff, 0xffff7fff, 0x130, 0x8a, 0x3, 0xa4f9, 0x7, 0x9, 0x40, 0x6, 0x10000, 0x9]}, {0x24, 0x0, [0x3, 0x1ff, 0xb3, 0x7ff, 0x8001, 0x6, 0x1, 0xffffffff, 0x9, 0x1, 0x6, 0x10001, 0x5, 0x1ff, 0x0, 0xffffffff]}, {0xc, 0x0, [0x7ff, 0x1000, 0x3, 0x3f, 0x4, 0x3, 0x7ff, 0x100, 0x4, 0xff, 0x0, 0x7, 0x4, 0x7fffffff, 0x4]}, {0x5, 0x0, [0xffffff00, 0x5, 0x0, 0x7ff8000, 0x3, 0x0, 0x8001, 0x1, 0x7fff, 0x2, 0x8, 0xfffff131, 0x4, 0x3, 0x1, 0x1]}, {0x8, 0x0, [0x9, 0x7, 0x4, 0x1f, 0x4, 0x3c, 0x0, 0x200, 0x4, 0x744, 0x4, 0xfffffffd, 0x0, 0x101, 0x3, 0x2]}, {0x29, 0x0, [0x9, 0x3ff, 0x5, 0xb10, 0x1648, 0xff, 0x101, 0x1, 0x800, 0xf2ae, 0x1, 0x2, 0x1f, 0x8, 0xffff0000, 0x1]}], r1, 0x1, 0x1, 0x1b0}}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2000, 0xa7) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000080)) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x1) connect(r2, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x9, 0xfe, "2d5ae493723ec6642eeee71e960329c67e4a8c97e0a731269c62640c340edf33b637ba20499f368e9be6ada39cf87cc7a832b644f471784344542cd3d13ce0", 0x17}, 0x80) 20:54:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) open(0x0, 0x0, 0x0) 20:54:01 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="728bc76f5a931ef4efad", 0xa) 20:54:01 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/130) 20:54:01 executing program 3: ioperm(0x0, 0xfef, 0x559dd14a) pipe2$9p(&(0x7f0000000040), 0x0) 20:54:01 executing program 0: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x17, &(0x7f0000002000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "428226355d0ee06b7c037189aeaee7a5546bf80788a1f2b83b60959ece63fd46a7e5ab07eb162441494b8e7e0d9b6662bfcbbacdab43b2159ad64af1e76d516795a380f99c420b8e0b5da52b09e5a859"}, 0xd8) 20:54:01 executing program 5: mmap$usbmon(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x96031, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) 20:54:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x4, 0xffffffff}) open(0x0, 0x0, 0x0) 20:54:02 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x8000) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:02 executing program 3: r0 = socket$rds(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001900)=""/142, 0x8e}], 0x1}, 0xc881) 20:54:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x10, 0x0, &(0x7f0000000100)) 20:54:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'veth0_vlan\x00', {0x2, 0x4e23, @local}}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/134) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0x9) 20:54:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x520, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x9, 0x3f}, 0x8) r2 = open(0x0, 0x0, 0xa4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x2, 0x441) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000240)={r1, 0x4}, &(0x7f0000000280)=0x8) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x2) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x1}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x6, 0x4) 20:54:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x19, &(0x7f0000000100)={&(0x7f0000000780)={0x11, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION, @GTPA_PEER_ADDRESS={0x0, 0x4, @private}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) [ 597.751023][T12920] x_tables: unsorted underflow at hook 2 20:54:02 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x3}, 0x0, &(0x7f0000000380)={0x0, r1+60000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 20:54:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:54:03 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xfffd}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x8010, 0xffffffffffffffff, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/99) 20:54:03 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x24) [ 598.298032][T12920] x_tables: unsorted underflow at hook 2 [ 598.304397][T12922] x_tables: unsorted underflow at hook 2 20:54:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 20:54:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa8, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x24e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9aa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4a5824d}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10004840) 20:54:03 executing program 4: getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r0, 0x80}, 0x8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:03 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 20:54:03 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r1 = open(0x0, 0x0, 0x0) ioctl$sock_proto_private(r1, 0x89ef, &(0x7f00000000c0)="62361d48b12621c815985e3239d08ae4cdbae95f34902d33db0e9682d02d036b29509eee15da6af723ad48b22bda748f657eda46ea563d2f9f93eec8e07c5b9b01691061eacea715f7b22179c4ac50648c739e5bf892ca394f1d5816048f0520e372d789314672c727d2a980fca94834c0a48bd70bd52c7bbe7e998e90719faab79aa47082f5db115aa7d65fce95288f765658b00972d036") ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = dup(r1) faccessat(r5, &(0x7f0000001240)='./file0\x00', 0x61) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000180)=0x6) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'veth0_vlan\x00'}) 20:54:03 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) 20:54:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa8, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x24e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9aa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4a5824d}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10004840) 20:54:03 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r1, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x1, 0x4) 20:54:03 executing program 5: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x21, 0x0, 0x0) [ 599.305827][T12963] x_tables: unsorted underflow at hook 2 20:54:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x83, 0x1}, 0x40) 20:54:04 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x0) fanotify_mark(r0, 0x9, 0x4, 0xffffffffffffffff, 0x0) 20:54:04 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:04 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) 20:54:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/139) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x3, 0x0], 0x2, 0x180000, 0x0, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000000)='dummy0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r6, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6", 0x5}], 0x1, 0x0, 0x0, 0x2000040}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/ashmem\x00', 0x4800, 0x0) fstat(r8, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x1000004, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other='allow_other'}], [{@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}, {@obj_user={'obj_user', 0x3d, '--}\''}}, {@obj_user={'obj_user'}}, {@fowner_lt={'fowner<', r9}}, {@subj_user={'subj_user'}}]}}) [ 599.814089][T12975] x_tables: unsorted underflow at hook 2 20:54:04 executing program 0: r0 = socket(0xa, 0x3, 0x100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 599.978030][ C0] sd 0:0:1:0: [sg0] tag#7478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 599.988737][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB: Test Unit Ready [ 599.995408][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.005386][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.015355][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.026397][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.036275][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.046198][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.056066][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.065969][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.075831][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.085697][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.095654][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.105538][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.115392][ C0] sd 0:0:1:0: [sg0] tag#7478 CDB[c0]: 00 00 00 00 00 00 00 00 20:54:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3}, {0x4d}, {0x6, 0x0, 0x8f, 0x50000}]}) open(0x0, 0x0, 0x0) 20:54:04 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:54:04 executing program 1: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x28, 0x3a, 0xff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2}}}}}}, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:05 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/154) 20:54:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)=""/236, 0x1a, 0xec, 0x1}, 0x20) 20:54:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x4c, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']+-{}#:\x00'}]}]}]}]}, 0x4c}}, 0x0) 20:54:05 executing program 2: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) write$capi20(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0xe00, 0x80, 0x83, 0x3f, 0x3ff}, 0x10) open(0x0, 0x0, 0x0) 20:54:05 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x30) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e21, @broadcast}}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x2, 'veth1_to_team\x00', {0x6}, 0x6}) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vcsa\x00', 0x4000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000001280)={@any, 0x0, 0xcdd, 0x80, 0x40, 0x21, "08c2b8d6e09c3a499e8c4ac41c5eb015fa6e8076f7d338212dfaf6acba59cb701d81f2fb586f04c3650648cccc8a78c813e3ad1c975b8226ea15fc64e300ea3718d979c6868d9dbdca48da3ab81c0672ed03618e9eb10650ac0a598edf6bf8f304513d65c54b32aeaae8974ba1c72c71251c7b6b77f8012964782822ac5592be"}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x4, 0x3c}) 20:54:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000780)=0x200000000) write$vhost_msg(r0, &(0x7f0000000340)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) 20:54:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) [ 601.267947][T13012] x_tables: unsorted underflow at hook 2 [ 601.356889][T13012] x_tables: unsorted underflow at hook 2 20:54:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x36, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r9, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x1b, r9}) 20:54:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000100)) 20:54:06 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x5000, 0xf000, 0x63, 0x6, 0x401}) 20:54:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000140)) 20:54:06 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x204400, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast1, @local, @private0={0xfc, 0x0, [], 0x1}, 0x8001, 0x1ff, 0xfc, 0x100, 0x5, 0x20}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x5c1, 0x0) semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f00000001c0)=""/27) 20:54:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) 20:54:06 executing program 0: r0 = socket(0x23, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2020) 20:54:06 executing program 4: semget$private(0x0, 0x2, 0x24) r0 = semget(0x2, 0x4, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getdents(r3, &(0x7f0000000240)=""/4096, 0x1000) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000001c0)={0x3, 0x1, 0x4, 0x7fffffff, 0x4, 0x5aeb}) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x140a, 0x5c7d166243c7cbc0, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x10) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/148) 20:54:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="90010000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250b"], 0x190}, 0x1, 0x6c00}, 0x0) 20:54:07 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x520) getsockname$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000180)=0x10) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) 20:54:07 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, @hyper}, 0x10) 20:54:07 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x1a, &(0x7f0000000040)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) [ 602.551611][T13045] netlink: 380 bytes leftover after parsing attributes in process `syz-executor.5'. [ 602.603053][T13046] x_tables: unsorted underflow at hook 2 [ 602.644728][T13049] netlink: 380 bytes leftover after parsing attributes in process `syz-executor.5'. 20:54:07 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0xffffffff, 0x9, 0x1, 'queue1\x00', 0x4}) open(0x0, 0x0, 0x0) 20:54:07 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x4) r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000034c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000100)={0x0, 0x81000000, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="0100000000fd00000000420000e43e0000006e657464657673696d000a0010"], 0xb8}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c0, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xb179}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfffe}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf52e}, {0x6, 0x11, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xb58e}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x1c0}}, 0x840) 20:54:07 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34}) 20:54:07 executing program 3: bpf$MAP_CREATE(0xf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 20:54:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="db87000000000f01d166bad10466b8000066efb92d0b00000f3266660f3a0fa20020000051c4c2e99bb9080000000f38c890fb39000066baf80cb86ccbe381ef66bafc0cec3e0f01ca66660f38808c86fc7f0000", 0x54}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) syz_io_uring_setup(0x57ba, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) 20:54:07 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='@', 0x1}], 0x1) [ 603.149644][T13058] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 603.158709][T13058] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 20:54:08 executing program 1: pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80, 0x7ff8000, 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:08 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x12, 0x0, 0x0) 20:54:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x0, 0xaa}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:54:08 executing program 0: r0 = io_uring_setup(0x1a42, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x3, 0x0, 0x1) [ 603.858708][T13058] team0: Device veth0_macvtap failed to register rx_handler 20:54:08 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$packet_buf(r0, 0x6, 0x0, 0x0, 0x0) 20:54:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 20:54:08 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=""/149) [ 604.707920][T13081] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 604.716169][T13081] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 20:54:09 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d, 0x0, 0x0, 0x807d}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0), 0x4) r1 = fsmount(0xffffffffffffffff, 0x1, 0x8a) write$cgroup_freezer_state(r1, &(0x7f0000000000)='THAWED\x00', 0x7) 20:54:09 executing program 0: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 20:54:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 20:54:09 executing program 5: inotify_init() pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) 20:54:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0xc8) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:09 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, r0+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000001c0)) 20:54:09 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x540f, 0x0) 20:54:09 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0xc, 0x0, 0x0) [ 605.297727][ T8709] Bluetooth: hci3: command 0x0406 tx timeout 20:54:10 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)=""/140) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x8) 20:54:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x3f}, {0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x0, 0x0) 20:54:10 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x33565348}}) 20:54:10 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r2, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r2, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r3 = semget(0x3, 0x3, 0x8) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000100)=""/138) 20:54:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) 20:54:10 executing program 5: r0 = socket(0x22, 0x80002, 0x10) getpeername$inet6(r0, 0x0, 0x0) 20:54:10 executing program 1: r0 = semget(0x2, 0x5, 0x224) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/155) 20:54:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x80}, {0x4d, 0x80}, {0x6, 0x0, 0x0, 0x80}]}) open(0x0, 0x0, 0x0) 20:54:10 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x7d, &(0x7f0000000000)=""/227, &(0x7f0000000100)=0xe3) 20:54:10 executing program 1: semget(0x1, 0x1, 0x303) r0 = semget(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/130) [ 606.212896][T13136] delete_channel: no stack 20:54:11 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x10, &(0x7f0000000000)=""/227, &(0x7f0000000100)=0xe3) [ 606.244649][T13136] delete_channel: no stack 20:54:11 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x8}, 0x0) 20:54:11 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x5411, 0x0) 20:54:11 executing program 2: r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r2, r1, 0x0) getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x9401) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]}) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r5, r3, 0x0) getdents(r1, &(0x7f0000001240)=""/4083, 0xff3) getdents(r3, &(0x7f0000000040)=""/24, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r7, r6, 0x0) getdents(r6, &(0x7f0000000240)=""/4096, 0x1000) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f0000002240)={0xc4, ""/196}) 20:54:11 executing program 1: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/125) get_thread_area(&(0x7f0000000080)={0xffffffff, 0x100000, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000000c0)={0x0, 0x7}) 20:54:11 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x890b, &(0x7f0000000040)={'team_slave_0\x00'}) 20:54:11 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 20:54:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11, 0x4, 0x4, 0x403, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 20:54:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x549640, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) r1 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r1, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="ac14142d5c1cb7006fbb0e30010000000001000000ac1414aa"], 0x14) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = open(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x6, 0x2, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x10, 0x80, 0x3, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x81, 0x8, 0x18, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40, 0x7, 0x6, 0x7}}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="581032b0e49b820069bf920000962f00"/31, @ANYRES16=0x0, @ANYBLOB="000328bd7000fcdbdf251c00000008000300", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c00990002000000ffffffff0c030000000c009900dd2100000100000008000100030000000000000005000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) 20:54:12 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0), 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="17f8a618461cdd2a6e806cecb7513ea78bd57ee5fae05a0ba41ec39c3ff1a0eaca5380f8bd520962f1be61739e27ee0b7486d9197b79", 0x36, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r2, 0x7d, 0x98}, &(0x7f0000000480)=ANY=[@ANYBLOB="656e633d72617720686173683d6d696368630000000000000000000000000000000000000000000000000000000000000000008c1cb700000000000000005efbd580e1bbf0383e62f088c7fabfcbce2374480f4973424f3147272baedc744006d38f97e5d3cfc9516622b6c56b939db32a623e74c584a56250ad6026f15f50c310aad9f820fcf6f38ebd95118b91d886bff468c54c04f82f1d40d2e796a5b033ee409aca514aee0e8515e46e1351823f2378b75e877f4b51963b896dd25ff04526ae3e15b37443daacc54d7815ed233484ed4608496d752c035277d0a68846d3e0c4d0fb14"], &(0x7f0000000300)="5a624ee4b7743957919e27edd4ededc51282fcaaa85cd21fbbce8166b1abd1720b0a91644b089c49ca1e3c165a3487a43d52b2a8e4c1ef6aec95c5b485d8b182ac09b7cf3c20910a3108d6ed369eeb7a2d8aea9614ed9e84ade576970ef33941ee45d6def0910e9e288dc64f4d7d45bd21b07a3d34621a941a23a79e9f", &(0x7f00000003c0)=""/152) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000240)=""/140) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000034c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000100)={0x0, 0x81000000, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="0100000000fd00000000420000e43e0000006e657464657673696d000a0010"], 0xb8}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008085}, 0x10) 20:54:12 executing program 0: r0 = socket(0x23, 0x5, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 20:54:12 executing program 5: r0 = socket(0x26, 0x805, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 20:54:12 executing program 3: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x7e) 20:54:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3}, {0x4d}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x420401, 0x100) r1 = accept$unix(r0, &(0x7f0000001440)=@abs, &(0x7f00000014c0)=0x6e) getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 20:54:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x49, 0x0, &(0x7f0000000140)) [ 607.668142][T13180] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 607.676543][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.688812][T13180] team0: Device veth0_macvtap failed to register rx_handler 20:54:12 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6080000000280000fe8000000009000000000000005a9a412847002b01000000000000000000000000000000aa"], 0x0) 20:54:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x3, @sliced}}) 20:54:12 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x7, 0x0, 0x0) 20:54:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40189206, 0x400000) 20:54:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0xa000000}) 20:54:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x800001a4a, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x9}) [ 608.407280][T13182] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 608.415797][T13182] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 608.428160][T13182] team0: Device veth0_macvtap failed to register rx_handler 20:54:13 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x280000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 20:54:13 executing program 0: r0 = socket(0x22, 0x80002, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 20:54:13 executing program 5: iopl(0x3) sysfs$2(0x4, 0x0, 0x0) 20:54:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, 0x0, 0x0) 20:54:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 20:54:13 executing program 3: r0 = socket(0x15, 0x805, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34000}}, 0x0) 20:54:13 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x24, &(0x7f0000002000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "428226355d0ee06b7c037189aeaee7a5546bf80788a1f2b83b60959ece63fd46a7e5ab07eb162441494b8e7e0d9b6662bfcbbacdab43b2159ad64af1e76d516795a380f99c420b8e0b5da52b09e5a859"}, 0xd8) 20:54:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) prctl$PR_CAP_AMBIENT(0x7, 0x0, 0x0) 20:54:14 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x802, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x802, 0x0, &(0x7f0000000140)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x802, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="8c38e656c12e"}, 0x14) 20:54:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8916, 0x0) 20:54:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4b34, 0x0) 20:54:14 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/137) 20:54:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 20:54:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x10, 0x1a, 0x1}, 0x10}], 0x1}, 0x0) 20:54:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000b17a955b3560"], 0x14}}, 0x0) 20:54:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8918, &(0x7f0000000040)={'sit0\x00', 0x0}) 20:54:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80) bind(r0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80) 20:54:14 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x5}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/140) 20:54:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5406, &(0x7f0000000140)) 20:54:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa}, 0x40) 20:54:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0xa}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) 20:54:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000100)) 20:54:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000140), 0x4) 20:54:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 20:54:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000240)=[@cr4={0x1, 0x520422}], 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) 20:54:15 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) 20:54:15 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000002280)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0x5c9}], 0x1}, 0x0) 20:54:15 executing program 5: r0 = socket(0xa, 0x805, 0x0) getpeername(r0, 0x0, 0x0) 20:54:15 executing program 1: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x64, 0x0, 0x0) 20:54:16 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x42c, 0x3f4, 0x8, 0x70bd25, 0x25dfdbfc, {0x6804677281da2b3a, 0x1, 0xb, [0x9, 0x1, 0x2, 0x6, 0x9, 0xfffff000, 0x3, 0xfff, 0x8, 0x6, 0x3ff, 0x8, 0x4c, 0x6, 0x7, 0x101, 0xce3, 0x8, 0x3, 0x1, 0x20, 0x2, 0x81, 0x10000, 0x3, 0xfff, 0x8, 0x80000000, 0x81, 0x6, 0x7, 0x0, 0x2, 0x800, 0x4, 0x8, 0x5, 0x8001, 0xfffffff7, 0x1, 0x80000001, 0x2f, 0x200, 0x5, 0xa0, 0x2, 0x9, 0x3, 0xfffffffb, 0x5, 0x0, 0x3, 0x3, 0x0, 0x9, 0x86, 0x8, 0x5, 0x8, 0x10001, 0x7, 0xa38, 0x2, 0x828], [0x3, 0x10000, 0x9, 0x3, 0x7, 0x2, 0x80000001, 0xfffffffa, 0x1, 0x3ff, 0x0, 0x0, 0x2, 0x2, 0x8198, 0x0, 0x7, 0x9, 0x200, 0xa062, 0xce5, 0x7fff, 0x4, 0x5, 0x2, 0xfa9a, 0x9, 0x0, 0xd0, 0x2, 0x1, 0xfffffffc, 0x9, 0xfffffffe, 0x1, 0x101, 0x9, 0x1, 0x8, 0x6, 0x0, 0x7, 0x8, 0x1ff, 0x6338, 0x7fff, 0xfffffffe, 0xffffffff, 0x6, 0xe0000, 0x1, 0x0, 0x9, 0x9f9, 0x2, 0x3140, 0x8, 0x5, 0x3f, 0x3, 0x8, 0x12, 0x6, 0x21e], [0x9, 0x5, 0x400, 0x1, 0x4, 0x5, 0x0, 0x0, 0x8001, 0x87, 0x569d, 0x20, 0x7, 0x100, 0x2, 0x1, 0x0, 0x0, 0x200, 0x1, 0x5, 0x6, 0x2, 0x2, 0x4, 0x81, 0x7, 0x3, 0x80, 0x3, 0x4, 0x1, 0x5, 0x2, 0x5, 0x8, 0x9a, 0x1, 0x7, 0x10000, 0x1347, 0x7fff, 0x100, 0x8ce9, 0x8, 0x6f54c7e9, 0x3f, 0x0, 0x8000, 0x8, 0x701, 0x4, 0x0, 0xfffff801, 0x3, 0x793, 0x5, 0x0, 0x1000, 0x4ad6, 0xeb0b, 0xffff, 0x4, 0x4], [0x8001, 0x7, 0x4a33, 0x57, 0x1, 0x7fffffff, 0x6, 0x1f, 0x0, 0x6, 0x0, 0x0, 0x382000, 0xffffffff, 0x4, 0x4, 0x101, 0x7, 0x7, 0x3, 0x3, 0xfff, 0x0, 0x8, 0x80, 0x9, 0x8, 0x10001, 0x5, 0x44a, 0x9, 0x7, 0x2, 0x4, 0xb42e, 0x0, 0x401, 0x7c, 0x6, 0x2, 0x90b, 0x1, 0x80, 0xffffebd8, 0x0, 0x3f, 0x8, 0x401, 0x7, 0x4, 0x3, 0x101, 0x800, 0x1000, 0x7d, 0x41f, 0x7, 0x7fffffff, 0x6, 0x7, 0x2, 0x4, 0x9], 0xb, ['*)\x00', '}[R\x00', '#\x00', '&\x00']}, ["", "", "", "", "", "", "", ""]}, 0x42c}}, 0x8041) 20:54:16 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2001, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 20:54:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x200000, 0x0) dup3(r0, r1, 0x0) 20:54:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d02}]}) 20:54:16 executing program 0: r0 = socket(0x29, 0x805, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team0\x00', 0x2000000}) 20:54:16 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x40000}, 0x0) [ 611.779525][T13311] team0: mtu greater than device maximum 20:54:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 20:54:16 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1010, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24002001) gettid() sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000000) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x18}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x224, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x56e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf040}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000001, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 20:54:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005880)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c, 0x0}}], 0x1, 0x24000094) 20:54:16 executing program 0: r0 = socket(0x1d, 0x80002, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000780)=@req={0x28, &(0x7f0000000740)={'ip6_vti0\x00', @ifru_addrs=@can={0x1d, 0x0}}}) connect$can_j1939(r0, &(0x7f00000007c0)={0x1d, r1}, 0x18) 20:54:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0xf, &(0x7f0000000000)=""/227, &(0x7f0000000100)=0xe3) [ 612.119837][T13317] binder_alloc: binder_alloc_mmap_handler: 13316 20ffd000-21000000 already mapped failed -16 20:54:16 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) [ 612.186029][T13319] binder_alloc: binder_alloc_mmap_handler: 13316 20ffd000-21000000 already mapped failed -16 [ 612.231939][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:54:17 executing program 3: r0 = socket(0x18, 0x0, 0x2) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 20:54:17 executing program 2: r0 = socket(0x1, 0x1, 0x0) getsockopt(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) 20:54:17 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0xd2, @local}) 20:54:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5385, 0x0) 20:54:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) prctl$PR_CAP_AMBIENT(0x18, 0x0, 0x0) 20:54:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x7a, &(0x7f0000000000)=""/227, &(0x7f0000000100)=0xe3) 20:54:17 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x22, &(0x7f0000002000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "428226355d0ee06b7c037189aeaee7a5546bf80788a1f2b83b60959ece63fd46a7e5ab07eb162441494b8e7e0d9b6662bfcbbacdab43b2159ad64af1e76d516795a380f99c420b8e0b5da52b09e5a859"}, 0xd8) 20:54:17 executing program 2: bpf$MAP_CREATE(0x22, &(0x7f0000000000), 0x40) 20:54:17 executing program 0: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x83, 0x0, 0x0) 20:54:17 executing program 4: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/140) 20:54:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000140)) 20:54:17 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc050565d, &(0x7f0000000200)={0x0, 0x3}) 20:54:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000934000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) 20:54:18 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0205647, &(0x7f0000000000)) 20:54:18 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0xb, 0x0, &(0x7f0000000140)) 20:54:18 executing program 4: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), 0x4) 20:54:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000002dc0)={0x0, 0x1, 0x6, @random="a04852e30c7a"}, 0x10) 20:54:18 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 20:54:18 executing program 2: socketpair(0x10, 0x2, 0x3847c4ce, &(0x7f00000002c0)) 20:54:18 executing program 4: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8981, 0x0) 20:54:18 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_aout(r0, 0x0, 0xeffd) 20:54:18 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0x1e, 0x0, 0x0) 20:54:18 executing program 5: io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="3751ebbf8058c9225e763c0ee4", 0xd}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000040)={'syztnl0\x00', 0x0}) 20:54:18 executing program 1: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x11, 0x0, 0x0) 20:54:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x17b}]}) 20:54:19 executing program 2: r0 = socket(0xf, 0x3, 0x2) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) 20:54:19 executing program 4: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0xff600000) 20:54:19 executing program 0: socket(0x2e, 0x0, 0x0) 20:54:19 executing program 1: socket(0x39bd9123284fc7c5, 0x0, 0x0) 20:54:19 executing program 5: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x24, 0x0, 0x0) 20:54:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) 20:54:19 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = io_uring_setup(0x1a42, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x2, &(0x7f0000000100)=r0, 0x1) 20:54:19 executing program 3: add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 20:54:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x5a}]}, 0x1c}}, 0x0) 20:54:20 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:20 executing program 4: keyctl$search(0xa, 0x0, &(0x7f00000003c0)='id_resolver\x00', 0x0, 0x0) 20:54:20 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 20:54:20 executing program 2: r0 = socket(0x2b, 0x1, 0x0) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24040852) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 20:54:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 20:54:20 executing program 1: r0 = socket(0x29, 0x805, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x8, 0x0, 0x2}, 0x0) 20:54:20 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:20 executing program 4: r0 = socket$nl_generic(0x2, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89e1, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_mtu}) 20:54:20 executing program 3: r0 = socket(0x2b, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 20:54:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2505000000180002"], 0x34}}, 0x0) 20:54:20 executing program 1: r0 = socket(0x23, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0x23, 0xfcfc, 0x0, @ipv4={[], [], @local}}, 0x20) 20:54:20 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:21 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="2b53000000000000000008000000080003"], 0x1c}}, 0x0) 20:54:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:21 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x10000000) 20:54:21 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc020660b, 0x0) 20:54:21 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x7, 0x0, &(0x7f0000000140)) 20:54:21 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 20:54:21 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:21 executing program 4: r0 = inotify_init() read$FUSE(r0, 0x0, 0x0) 20:54:21 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) readlinkat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000040)=""/213, 0xd5) 20:54:21 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x541b, 0x0) 20:54:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0xffffffffffffff72) 20:54:21 executing program 0: bpf$MAP_CREATE(0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 20:54:22 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x79, 0x0, 0x0) [ 617.324034][T13475] QAT: Invalid ioctl 20:54:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:22 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 20:54:22 executing program 2: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000280)='\x00', 0x0) 20:54:22 executing program 0: newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) 20:54:22 executing program 3: write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) 20:54:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:22 executing program 4: r0 = socket$rds(0xa, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x29, 0x43, 0x0, 0x0) 20:54:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x1, 0x0, 0x2, 0x0, 0x1}, 0x40) 20:54:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x11, 0x2, 0x0, 0x0) 20:54:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x21, 0x0, 0x0) 20:54:23 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) 20:54:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8108551b, 0x0) 20:54:23 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)='A', 0x1}], 0x1) 20:54:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0x18, 0x0, 0x0) 20:54:23 executing program 0: r0 = syz_io_uring_setup(0xff, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000640)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x409a853, r0, 0x10000000) 20:54:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$can_j1939(r0, &(0x7f00000001c0)={0xa}, 0x17) 20:54:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:23 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 20:54:23 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0505609, &(0x7f0000000200)={0x0, 0xd}) 20:54:23 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 20:54:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x541b, 0x0) 20:54:24 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 20:54:24 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:24 executing program 1: r0 = socket(0x29, 0x5, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 20:54:24 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x541b, &(0x7f0000000040)={'vlan0\x00', @ifru_map}) 20:54:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="1c0000005e00cf06000000000000f9ffffff0000d7fa48695f"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:54:24 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x27, 0x0, &(0x7f0000000140)) 20:54:24 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 20:54:24 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[], 0x67, 0x1) 20:54:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xd, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x3000}, &(0x7f0000000040)=0xffffff4c) 20:54:24 executing program 2: r0 = socket(0x22, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:54:24 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0xb, 0x0, 0x0) 20:54:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:25 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x10d, 0x4, 0x0, 0x0) 20:54:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000200), 0x4) 20:54:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000001000000dd0a0000000000007b019a00000000009500000000ed1e0a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 20:54:25 executing program 2: r0 = socket(0xa, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) 20:54:25 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8970, &(0x7f00000000c0)={'team0\x00'}) [ 620.724551][T13580] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 20:54:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:25 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x3, 0x0, 0x3000000) 20:54:25 executing program 4: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 20:54:25 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x84, 0x77, 0x0, 0x0) 20:54:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5420, &(0x7f0000000080)) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x96031, 0xffffffffffffffff, 0x0) 20:54:25 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x38, 0x1403, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0xffffffffffffff1d, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x68}}, 0x0) 20:54:26 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:26 executing program 4: socket(0x2c, 0x3, 0xffffffff) 20:54:26 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x65, 0x0, 0x0) 20:54:26 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x541b, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 20:54:26 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x10, 0x0) 20:54:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x140}]}) 20:54:26 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 20:54:26 executing program 4: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x1e, 0x0, 0x0) 20:54:26 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 20:54:26 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:26 executing program 0: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x409, 0x0) 20:54:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:54:27 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 20:54:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000140)) 20:54:27 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 20:54:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x571}]}) 20:54:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 20:54:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001480)={0x10, 0x38, 0x1}, 0x10}], 0x1}, 0x0) 20:54:27 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x80108906, 0x0) 20:54:27 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000180), 0x0) 20:54:27 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 20:54:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0xc, 0x0, &(0x7f0000000140)) 20:54:28 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc0189436, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x2013}) 20:54:28 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000042c0)={0x10}, 0x10}}, 0x0) 20:54:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000140)) [ 623.463333][T13665] binder: 13663:13665 ioctl 541b 0 returned -22 20:54:28 executing program 5: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) prctl$PR_CAP_AMBIENT(0x8, 0x0, 0x0) 20:54:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5420, &(0x7f0000000080)) 20:54:28 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000180)={"744caad10ff6f9345ed3cca533fa402d1e708735f7ede0289df75d034570", 0xffffffff}) 20:54:28 executing program 1: r0 = socket(0x10, 0x2, 0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) 20:54:28 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x40184150, 0x0) 20:54:28 executing program 5: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:29 executing program 0: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6, &(0x7f0000002000)={@in6={{0xa, 0x4e20, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "428226355d0ee06b7c037189aeaee7a5546bf80788a1f2b83b60959ece63fd46a7e5ab07eb162441494b8e7e0d9b6662bfcbbacdab43b2159ad64af1e76d516795a380f99c420b8e0b5da52b09e5a859"}, 0xd8) 20:54:29 executing program 2: r0 = socket(0x11, 0x80002, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 20:54:29 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 20:54:29 executing program 1: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000640)=@xdp, 0x80, 0x0}, 0x0) r0 = socket(0x2, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000240)={0x2}, 0x10, &(0x7f0000000280)={0x0}, 0x8}, 0x4004020) 20:54:29 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8906, 0x0) 20:54:29 executing program 5: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x18, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) 20:54:29 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 20:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000980)={0x24, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x24}], 0x1}, 0x0) 20:54:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) r1 = socket(0xa, 0x3, 0x5) ioctl$SIOCGETLINKNAME(r1, 0x890b, &(0x7f0000000040)={0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x200000d1) 20:54:29 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_mtu=0x4}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2d}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_EXPECT_NAT={0x28, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000801}, 0x54) r1 = socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r4 = socket(0xa, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000940)) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1c, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x108, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffdd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4b3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x963b}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x916}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', r5}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x14}, 0x20000514}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) accept(r7, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x80) 20:54:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @private2, [0x0, 0x0, 0x0, 0x40000000], [], 'vcan0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@dev, @rand_addr=' \x01\x00', [], [], 'bond_slave_1\x00', 'caif0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 20:54:30 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000), 0x8) [ 625.456662][T13719] bridge0: port 3(gretap0) entered blocking state [ 625.463497][T13719] bridge0: port 3(gretap0) entered disabled state [ 625.472602][T13719] device gretap0 entered promiscuous mode [ 625.479797][T13719] bridge0: port 3(gretap0) entered blocking state [ 625.486453][T13719] bridge0: port 3(gretap0) entered forwarding state 20:54:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000dc0)={'geneve0\x00', &(0x7f0000000d00)=@ethtool_pauseparam={0x13}}) 20:54:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) r1 = socket(0xa, 0x3, 0x5) ioctl$SIOCGETLINKNAME(r1, 0x890b, &(0x7f0000000040)={0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x200000d1) 20:54:30 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) 20:54:30 executing program 3: r0 = socket(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x84, 0x78, 0x0, 0x0) 20:54:30 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={0x1}) ioctl$VIDIOC_EXPBUF(r0, 0xc050565d, &(0x7f0000000000)={0x0, 0x9}) 20:54:30 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x80108906, 0x0) 20:54:30 executing program 2: r0 = socket(0x29, 0x805, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 626.218377][T13740] ===================================================== [ 626.225367][T13740] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 626.232847][T13740] CPU: 1 PID: 13740 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 626.241527][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.251584][T13740] Call Trace: [ 626.254897][T13740] dump_stack+0x21c/0x280 [ 626.259242][T13740] kmsan_report+0xf7/0x1e0 20:54:31 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x88901) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x64) [ 626.263679][T13740] kmsan_internal_check_memory+0x238/0x3d0 [ 626.269498][T13740] ? should_fail+0x72/0x9e0 [ 626.274017][T13740] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 626.280188][T13740] kmsan_copy_to_user+0x81/0x90 [ 626.285067][T13740] _copy_to_user+0x1d2/0x2b0 [ 626.289740][T13740] video_usercopy+0x24a9/0x3140 [ 626.294767][T13740] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 626.300903][T13740] ? do_vfs_ioctl+0x1248/0x37d0 [ 626.305771][T13740] video_ioctl2+0x9f/0xb0 [ 626.310122][T13740] ? video_usercopy+0x3140/0x3140 [ 626.315160][T13740] v4l2_ioctl+0x255/0x290 [ 626.319506][T13740] ? v4l2_poll+0x440/0x440 [ 626.323934][T13740] __se_sys_ioctl+0x319/0x4d0 [ 626.328625][T13740] __x64_sys_ioctl+0x4a/0x70 [ 626.333211][T13740] do_syscall_64+0xad/0x160 [ 626.337743][T13740] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 626.343626][T13740] RIP: 0033:0x45d5b9 [ 626.347677][T13740] Code: Bad RIP value. [ 626.351733][T13740] RSP: 002b:00007f974437dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.360139][T13740] RAX: ffffffffffffffda RBX: 000000000001bbc0 RCX: 000000000045d5b9 [ 626.368112][T13740] RDX: 0000000020000000 RSI: 00000000c050565d RDI: 0000000000000003 [ 626.376101][T13740] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 626.384083][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 626.392053][T13740] R13: 000000000169fb6f R14: 00007f974437e9c0 R15: 000000000118cf4c [ 626.400046][T13740] [ 626.402366][T13740] Local variable ----vb32.i@video_usercopy created at: [ 626.409210][T13740] video_usercopy+0x20d7/0x3140 [ 626.414056][T13740] video_usercopy+0x20d7/0x3140 [ 626.418904][T13740] [ 626.421224][T13740] Bytes 52-55 of 80 are uninitialized [ 626.426618][T13740] Memory access of size 80 starts at ffff8881b76e3ce0 [ 626.433798][T13740] Data copied to user address 0000000020000000 [ 626.439935][T13740] ===================================================== [ 626.446851][T13740] Disabling lock debugging due to kernel taint [ 626.452989][T13740] Kernel panic - not syncing: panic_on_warn set ... [ 626.459572][T13740] CPU: 1 PID: 13740 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 626.469641][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.479683][T13740] Call Trace: [ 626.482983][T13740] dump_stack+0x21c/0x280 [ 626.487375][T13740] panic+0x4d7/0xef7 [ 626.491278][T13740] ? add_taint+0x17c/0x210 [ 626.495693][T13740] kmsan_report+0x1df/0x1e0 [ 626.500200][T13740] kmsan_internal_check_memory+0x238/0x3d0 [ 626.506001][T13740] ? should_fail+0x72/0x9e0 [ 626.510503][T13740] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 626.516672][T13740] kmsan_copy_to_user+0x81/0x90 [ 626.521527][T13740] _copy_to_user+0x1d2/0x2b0 [ 626.526121][T13740] video_usercopy+0x24a9/0x3140 [ 626.531000][T13740] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 626.537058][T13740] ? do_vfs_ioctl+0x1248/0x37d0 [ 626.541937][T13740] video_ioctl2+0x9f/0xb0 [ 626.546263][T13740] ? video_usercopy+0x3140/0x3140 [ 626.551280][T13740] v4l2_ioctl+0x255/0x290 [ 626.555606][T13740] ? v4l2_poll+0x440/0x440 [ 626.560014][T13740] __se_sys_ioctl+0x319/0x4d0 [ 626.564709][T13740] __x64_sys_ioctl+0x4a/0x70 [ 626.569295][T13740] do_syscall_64+0xad/0x160 [ 626.573794][T13740] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 626.579674][T13740] RIP: 0033:0x45d5b9 [ 626.584769][T13740] Code: Bad RIP value. [ 626.588822][T13740] RSP: 002b:00007f974437dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.597226][T13740] RAX: ffffffffffffffda RBX: 000000000001bbc0 RCX: 000000000045d5b9 [ 626.605186][T13740] RDX: 0000000020000000 RSI: 00000000c050565d RDI: 0000000000000003 [ 626.613151][T13740] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 626.621113][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 626.629079][T13740] R13: 000000000169fb6f R14: 00007f974437e9c0 R15: 000000000118cf4c [ 626.638436][T13740] Kernel Offset: disabled [ 626.642755][T13740] Rebooting in 86400 seconds..