dev/cachefiles\x00', 0x8441, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) ioctl$NBD_CLEAR_QUE(r6, 0xab05) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_FLAGS={0x8, 0x8, 0x22a}]}, 0x20}}, 0x0) [ 903.483717][ T1763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 903.540756][ T1763] device bond1 entered promiscuous mode [ 903.577936][ T1769] device bridge3 entered promiscuous mode 22:50:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r1, 0x200004) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x19, 0x200, @l2={'ib', 0x3a, 'macvtap0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000804) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'veth1_to_team\x00', {}, 0x80}) close(r2) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r5, 0x0, 0x80001d00c0d0) [ 903.594947][ T1769] bond1: (slave bridge3): Enslaving as an active interface with an up link 22:50:54 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x503000, 0x4) read(r2, &(0x7f0000000180)=""/81, 0x51) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 903.739273][ T1799] bond1 (unregistering): (slave bridge3): Releasing backup interface 22:50:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000075, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000180)=0x1) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x2) eventfd(0x2008000) 22:50:54 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560300000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d2438526ec222924d32ab30861f52e2417f9ebfeb82ee2469fb31bdbb27622cd"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 904.069524][ C1] sd 0:0:1:0: [sg0] tag#4324 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 904.080230][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB: Test Unit Ready [ 904.087061][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.096998][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.106890][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.116800][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.126683][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.137785][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.148561][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.158872][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.168823][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.179333][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.189235][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.199121][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.209189][ C1] sd 0:0:1:0: [sg0] tag#4324 CDB[c0]: 00 00 00 00 00 00 00 00 [ 904.560313][ T1799] bond1 (unregistering): Released all slaves [ 904.817327][ C1] sd 0:0:1:0: [sg0] tag#4302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 904.828434][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB: Test Unit Ready [ 904.835181][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.845144][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.855038][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.865051][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.875048][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.885389][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.895215][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.905055][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.915235][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.925072][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.934910][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.944725][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 904.954743][ C1] sd 0:0:1:0: [sg0] tag#4302 CDB[c0]: 00 00 00 00 00 00 00 00 22:50:55 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xc) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) sched_getscheduler(r3) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) tkill(r0, 0x1000000000016) [ 905.092457][ T1769] device bridge4 entered promiscuous mode [ 905.107466][ T1763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:50:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x0, 0x8a8d, 0x400, 0x0, 0x4}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3b, &(0x7f0000000140)="8ad28dfe178665fa7587a784642315da47b1522000a50c7c0d42c23fb275cd7d1e8cf5bb9eb68538ceb03e0323996b2aa6e9d5158dff2f4a0a7e5d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f000000a000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000240)) shmctl$SHM_LOCK(r2, 0xb) 22:50:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/227, &(0x7f0000000100)=0xe3) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000240)={0x6}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0xed550a97b068930d, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000001c0)={0x0, r6, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x874}}, 0x0) 22:50:56 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x1, r6, 0x15}, 0x10) tkill(r0, 0x1000000000016) 22:50:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=0x6e) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4000, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x1, 0xf000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000002c0)={{0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'wlc\x00', 0x0, 0x10000, 0x27}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4e24, 0x1, 0xff, 0x6, 0x9b0}}, 0x44) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x6fc, 0x0, 0x2, 0x0, 0x0, 0x4], 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:50:56 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe700, 0x101, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 905.850751][ C0] sd 0:0:1:0: [sg0] tag#4349 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 905.861701][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB: Test Unit Ready [ 905.868487][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.869803][ T1944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 905.878497][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.878593][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.878694][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.878793][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.927479][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.937389][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.947323][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.957228][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.967135][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.977317][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.987338][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 905.997257][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[c0]: 00 00 00 00 00 00 00 00 [ 906.575483][ T1944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 906.620823][ C0] sd 0:0:1:0: [sg0] tag#4351 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 906.631505][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB: Test Unit Ready [ 906.638309][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.648421][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.658340][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.668292][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.678304][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.688616][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.698580][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.708562][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.718549][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.728582][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.738519][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.748431][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.759330][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[c0]: 00 00 00 00 00 00 00 00 22:50:57 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x78, 0x3ac1, 0x2, 0x4, 0xe, "269bb140908cea43"}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:50:57 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000100)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x4a00, 0x4) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r4, 0x0, 0x10003, 0x0) 22:50:58 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000980)=""/175) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/829], 0x18}}, 0x0) close(r1) 22:50:58 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = socket$netlink(0x10, 0x3, 0x13) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002bbd700005002f000000000008003b0001000000050038000000005108003a3e00000000050038000000000008003a0003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000001", @ANYRES16=r4, @ANYBLOB="010e2bb57000fddbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="296c86c55428115a62a7dd685fa02843d7d179e10320ee186139e6c5f2a526", @ANYRES16=r4, @ANYBLOB="00082dbd7000fbdbdf250e00000008003b000008000008003200bd0000000800390000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008840) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2040090}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="01000000cee4d0e3370993d9a089fd450a5192dc7f0fe324b3b0f20c8e3a45a73ae74d8aae5591d1e2cd82b288a83855024240e9b37ab82f7119533bb30595a1ffff21b2aaca4c37aa4bb81024dc00f0bd9c0439d09d07c761b3762c998a38a700c703c92e0ab118adbfa1fb7b00"/119, @ANYRES16=r4, @ANYBLOB="200025bd7000fbdbdfad11000000050030000000080000000000000000000ff7e6cc632eeb553e203d9299848ab9eb9f4f7193040fa4b9d6f03e57c151b11917b180430371fde17add57fe6e5f83885204ec3d6a79a9ee0105aae9087662e2c0817b7cbd3ba002f0d87890d0da1b09c2519cb31aa39b33f1262b01b740bb95da6786b7cc6014f1597e06bde37f890e5ad36644feaf58a8cbc3"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c091) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x28}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x45) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f00000000c0), 0xa6d8, &(0x7f0000fef000/0xe000)=nil, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) 22:50:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="73797a31f0215f4fa14ce0e0e8bc03d9dc1a65c964cca20d5593263b29222066c17b000c8f2cb32b21c4a420e02ab92d9cb8be89541f274cca13784f86beef6c0599e9f0e2f09831b366814ab896b79338718a372077dfbd0d28318e865f9d482fd371e79e807702bf4f1369fea0f43a72235c2f8a289c07b59ba9f4848f7547bd27ca88b4517a788d530474b3afaaa6b0186af8573256da9ccc7705f45859bb74b0b90b4f7b880911ec693032df3ba32a270dd18c0353ded592ecf5403a46656d81e2ed5608411bbce65e69c680bee479f2a0bf4ef74609"], 0xaa) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x192) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ftruncate(r2, 0x200004) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x94, 0x15, 0x0, 0x70bd2a, 0x25dfdbfb, {0x2, 0x40, 0xac, 0xff, r3}, [@IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x6e1, 0x0, 0x200, 0x200}}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0xff, 0x1ff, 0xffffffad}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x94}, 0x1, 0x0, 0x0, 0x8001}, 0x24088000) [ 907.343898][ C0] sd 0:0:1:0: [sg0] tag#4293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 907.354627][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB: Test Unit Ready [ 907.361294][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.371189][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.381096][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.391115][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.401026][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.410862][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.420853][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.430771][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.440675][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.444028][ T2023] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 907.450563][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.472031][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.482025][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 907.491914][ C0] sd 0:0:1:0: [sg0] tag#4293 CDB[c0]: 00 00 00 00 00 00 00 00 [ 907.655704][ T32] audit: type=1800 audit(1593989458.512:28): pid=2030 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15739 res=0 22:50:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xff}) tkill(0x0, 0xc) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x2, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="f5f05ea00be4bf8096f01181485c0ba49c74f3e44ddd4e709b1e0ee85d7d56a634c74beb8aed56880db577f0a4e075c6ad4bed0d5c5cca31878de3d7694429097a8ad0026b6bc430a30be3c96e410a1752064342f000890bbb0d27e4f71a2ebecfd4696692f34cb4f036a531d618d46ce4b78c27d5aa6b59f24cebcb74337ac4e4201ea7a266c36f574fdbc283c169e4c65f9c33d1decb583b0b9eafe1f5ae10fe98d852fd4280fc564c3d37ccb8c7689e90bd14e40514083bb8a731cb8f5ca66754f5e274cc16817dfb3c905187aedcf67b2e6b3b4488ddbcc86a996838902934c5d082ac49393c25f00c835ec2da69b4b8", 0xf2}, {&(0x7f0000000300)="0eab10dbc86eabfb844ba167326ef43372ed9a9696ae031a46e01e501f694c68187836830f56bd2701febce1a730a9513910133ae9ed6e2e01abc159261f1eb55688d17cb37bcead629ab41ca3d8f69f5422a20e7ee81d92c00796cb6874e87b4724745e84c2fc90b3d4cf796abca2c3ec362c1174fc700aa76f90bc4bb75d371f87d706ec6d2dbb42c18825820492b092d7673ea7d44e86dfe98a33efe11b22bbc6e67b55d68d862c4d12ff898ea3741e49a3815bf5c19f770cc5fbb79c44a0d1da72948e5d7c1cda5e4ba7c65279c60d0554f7fdcfdc1bc523566ba2ff893fcf3e8da742c6e6eefd18c8b896f73f9de7975f", 0xf3}, {&(0x7f0000000400)="655e7586497e912d8a8e40ba567507cc46c499bfb6fc57ceb335cb0767719247e5e780491945fbafe39424e2e055ab25c300ccd41a174ce38ba84a6bf1614ef6bcbf783923de74a9955c557bf5ddbfb8f6689b12f8905806d2ed19db5fda4f25d385a92c3f1aa7d22deb3b0692e9a98ad1acb7b2fd86290880cd3ac8bb6570050b589b5770446d4e0980115dd14a1f5c5aee614da4580736414a8da8958c7ddc120e31086fd3138f61ee7bc45ef5217e3e93b0e9641503f14d87e7ec69f15f1f44cf9044a01843cc7ea3fe2a04b1a93fecdcce35dc99651e2f38ec86cba83ac03395f147420334ed28233267f8a1e3c8430f", 0xf2}, {&(0x7f0000000080)="768949a2f0023e", 0x7}, {&(0x7f0000000500)="054aa857e1de2855c9c81d693fd26b4ac0d45a0d8685e157e42acd0f3c11a2b23e98fe8c015e46b96cb3b94ad3422019c413744327b16d3bde24afaba560db923b764bafa8ca9545b71fd0312827bacbe85ff54fa26de9aff756df9592a1e6ea4316b84305c6b05a84fae1982ab62749fa2158d14a9471899c05a0d8d69d2898aca518", 0x83}], 0x5, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20, 0x8000}, {&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="20bbed115c29be745a8362775b71c6c28a5da022ea3f5ce9674183277e22dd54d098f9ad12ee2646e1e30aaaeae8c712cd21742b8643b12e8f8c80e0ba1ef6be2be817cbd508286fac3653dcb9e655c335525706de8c988e77cea583b0642d993caabad3d9553134454a494128128f04315b7fba7bdd2d8154ebe7a7cb963702412cd8316fc614a64066b67a5649dccd961b7f0e4b65c357a128b534c283b4b494", 0xa1}, {&(0x7f0000000700)}, {&(0x7f0000000740)="2bfaa5ba9d9daab8b2c367f1e3e2d02a3f8c", 0x12}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0xf8, 0x40801}, {&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)="1ab0f5efe2865731a195bb8cfdec897eb4bc0ce76d7c50bf648c23bbdddcdd403de177db3247a4305a1044069b41ec933d37677f24d1f30f70006b3978c7ff2182a1fd83eb01906720aadcac4dff3988ebb166e59ee8ff6280b2ebfd4f1425985d382d07c739a04b15fa23046a2b76c50824034b5c97b01175419ffda429c7fe70b5feda9883e2ad9c7469fcd61f36580f2de9df5232e085e2ac23e4de048f2bb80a205bd9bd91b33f3d941595e8bd5252306477b519161e18d664b85cf867baf0ad896e25a0c31d73af6f13f864d36971cddbcf43a0585b9a894edecb", 0xdd}, {&(0x7f0000000c00)="df7785b20fc91d31a1f8fabbad0a717d25737829a300eae99b61502369afd44c64058f6452e8c9f5a85aeedc384ae0adbd8745a3be9829bee21b4670194aff6bfe7bc245bea7831c8b1f835daf25c6fbf6e0ddfac985e379c29c5043dc0efa629497df1c83a86792d5ef9eb54c92b40cac466fde412fc141a8dc539ee766ed570cc0102c240ff8f037e0b5b4feba797d5c6f0678ce32", 0x96}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000d80)="d1e5296eab6d3b5d61573eb32b71c6337fb32b827d4f3dd5516266a000df7a64e81a3f4bd5f7f9870181387a2786cc3bf64ccab0f62303374f39abe3f64755400848138c07ff5b16569caf175f46d25c4c9c01f8e0718eab26dafcc28d716e55f9350a2899e471b10072735b74ac08ec6b0af8e246b6e1133db3b698dc8adfd273267612a1b5946c1912", 0x8a}, {&(0x7f0000000e40)="86b7915f6011483ee4cc9caa6a67493ef26490e989addd192a0fc43ed4c14023b96e2832bf57b7ae0655f8e684aabe1d9fa36b43843d657f88ca6fa43fb72e31e367e642089be76fcfbca2355264996063d66368508a70e4a11318a87ea975ce5d7d5b9c9291dcfbb65fd44a39c0726240c5012a17348190fca5cd2c1f05fe089b9bd8c34aac28902e0e39e04d59cf1a4c1ba2e0ccb2650a6801a4baef", 0x9d}], 0x2, &(0x7f0000000f40)=[@cred={{0x1c}}], 0x20, 0x4000000}, {&(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000001000)="35b13473690f714d5e3cba77a39fd7acab27b5b72b9c4c0f500c99f34c0288105485d2526c5049390d323960484f43be78a9939a8203ef66ff1d1e71a4678b38e30def0477483fa4e09e97995d3b07e1b7fa7b95031f1b73534695e7d17e3200bacab7697f62bae15cd35f605dc9bc81a7dd63bfa3f979f0bc1ac8d38f57c1bb467b5a1321ee0ff732a513cf", 0x8c}, {&(0x7f00000010c0)}, {&(0x7f0000001100)="2cfe5aec5673736e7937fd8f6a0d8da568f33dcb00afe1bcede434fecba8b48f3771900bf63186cf0d22c9f16ad2f4f64c6cafafe7bb6ee9fab97b7740f269cbccfd1f4f05ec6bbc09ad134ca9b1ffc757f3a46d00730c86df2ebad050cebe62304c71942e403e2306a0a322aca69e8e973048dc3934821763d23849a0da4326343575db3d9f3fed243e0c408eb3ed29710cdcd4ed6f14c583ac401375d9d249f4c79f42726c8410d88b58027463178683a310686988b2a6d5e9f2dd75edd28bd9e0e6ef03503f3b3afbeddfd6d3f82852b0d2020bccc12438c7e215c077", 0xde}, {&(0x7f0000001200)="8f33a13e6131ab6dd13d0e13724ccce313ac360fc63fdb8bc3543e33392054c9c41e2aa0e74587340214c7723e6073f2ec7ecfff0fd4737d17b8fd7f3e7a856c92451b4cc7ab15b193c71f0099c74e1fcc677951e56ce6480165ca4292c7c36928da5e472b2511efc407b07fefad90d2a5d2cfe97d366c3fd86d6ed6d03bf1bee8154fe23e3bc1088447ef3779f94ae9335af3e903d3357eba8622e9ff843e8f868a6969d46db61771deab0792693ec8", 0xb0}, {&(0x7f00000012c0)="08c014ee863064beef2c75f05058c592f26a19ae8ab9c142dd296a8c69fa0fe55e8173cba1051707d007b942c1d349032311fed3b87f2ec269ab9f07ff43f0573d618cfab3dd9ac58c81faade07e4c1e115bd85b1785ca6a2515fc18251cdf7ddb4b946a0cb52080cc8c1ce06766179b9c0ee45e4c302ae07617470f58400d5dcf8185dc2092", 0x86}, {&(0x7f0000001380)="2938dc08f60b994352566a5a4f95ebfd390831efecf5fffca99b0a750f5d83a1a8762b0dc3c5e0690dff35bad8582785890e22d68a16ea557ad039e12c13465b4dceda8f2d9229425decb0a33c68d87b6376a3e5fbb316ffc4fb28a63c821398ec0931bc793e502570d3e05747abf0f4ddf5d0ab3f367124d7bd676f93e91e9d715d353be7481c73747c1e9b9a7c0d70eef4cce4f4c5c605fef1f9dd448912119c8c9bd8da8f3d26", 0xa8}, {&(0x7f0000001440)="6b4528c4ae6e96517309b08337a52861a6f0c8ce9dadd1d33c751e2df77c4fb138bf1e287879ab6bbabc52398e26215b0858993f43f85ff1dfc45f51ea5f5c6df664b794e4e3139f8377ce81244eb5ba483f0d9fcd49a220ef3e3010ae0ebcc0d70e7213efa0528b8cdbf9176505778f313d645662440cb9c023", 0x7a}, {&(0x7f00000014c0)="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", 0x1000}], 0x8, &(0x7f0000002540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x58}, {&(0x7f00000025c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002640)="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", 0xff}], 0x1, 0x0, 0x0, 0x4000080}], 0x6, 0x10) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) [ 908.139760][ C0] sd 0:0:1:0: [sg0] tag#4330 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 908.150509][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB: Test Unit Ready [ 908.157262][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.167145][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.177044][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.186955][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.196824][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.206693][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.216551][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.226417][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:50:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f000000b080)=[{&(0x7f0000007f40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f000000b280)=""/78, 0x4e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000001540)=""/199, 0xc7}], 0x3}}], 0x3, 0x0, 0x0) [ 908.236319][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.246238][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.256207][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.266336][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 908.276230][ C0] sd 0:0:1:0: [sg0] tag#4330 CDB[c0]: 00 00 00 00 00 00 00 00 22:50:59 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x18, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x2}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r7, 0x10001, 0x1ff, 0xa2}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 908.306110][ T32] audit: type=1800 audit(1593989459.162:29): pid=2072 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15758 res=0 22:50:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, 0x18) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000070019000000000002000000ac14ffaa00000000000000000200000000000000fe7100000000000000000000000000ff0000000000ff030000000500000000000a00000000000000fe8000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000000000002000000000000000000000001fe8000000000000000000000000000ff"], 0xd8}}, 0x20040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x1f, 0x0, [], {0x0, @bt={0xe7f, 0x4, 0x0, 0x0, 0x1, 0x7, 0x2, 0x1, 0x1, 0x3, 0x7ff, 0x2, 0x7, 0x400, 0x11, 0x24, {0xff, 0x3000000}, 0x4, 0x3}}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x199600, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$FIONCLEX(r5, 0x5450) 22:50:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x882, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x8000) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0'}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) dup3(r0, r1, 0x0) 22:50:59 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002740)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/99, 0x63}, {&(0x7f00000028c0)=""/20, 0x14}, {&(0x7f0000000a00)=""/110, 0x6e}], 0x3}}, {{&(0x7f0000000a80)=@generic, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/105, 0x69}], 0x1, &(0x7f0000000b80)=""/145, 0x91}, 0x9}, {{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000cc0)=""/144, 0x90}, {&(0x7f0000000d80)=""/134, 0x86}, {&(0x7f0000000e40)=""/141, 0x8d}, {&(0x7f0000000f00)=""/132, 0x84}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001080)=""/254, 0xfe}, {&(0x7f0000001180)=""/84, 0x54}, {&(0x7f0000001200)=""/58, 0x3a}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x9, &(0x7f0000002300)=""/114, 0x72}, 0x4}, {{&(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002400)=""/6, 0x6}, {&(0x7f0000002440)=""/201, 0xc9}, {&(0x7f0000002540)=""/91, 0x5b}, {&(0x7f00000025c0)=""/91, 0x5b}], 0x4, &(0x7f0000002680)=""/165, 0xa5}, 0x5}], 0x4, 0x20, &(0x7f0000002880)={r2, r3+10000000}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x2e8, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ce}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff763d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c38}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x918}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800cc) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) close(r1) [ 909.074203][ C0] sd 0:0:1:0: [sg0] tag#4347 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 909.085129][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB: Test Unit Ready [ 909.092459][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.102417][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.112462][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:50:59 executing program 0: r0 = gettid() timer_create(0x5, &(0x7f0000044000)={0x0, 0x38, 0x0, @thr={&(0x7f0000000280)="ce83a21fbfbeccf0eaca8c14ac87c8fae211d405147245629b2f84545afd652d7e3e1ad4baff54360f4ceafeb9bcaacf31c5b5bfe857a33fef9c20f44127a9bcb6208b26f0a8242394429998b35f7e642be9c621543f4a1c3c4d1f9f791dea1689da0c726646c34a12782fdcb0bf582d678693ddd9cbc386009ac60973972ac7246255e6b865369acb0fb24f63222adcc72c53e6c8c41c3df7e380e330", &(0x7f00000001c0)="d5a31e518c5d323323fddcf640445b209d5fca089e7734ce66a1de4fd15013707c0656d1930822ce0f8abf"}}, &(0x7f0000044000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1]) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010007000000000002000100", @ANYRES32=0x0, @ANYBLOB="040002860000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="10000400000000002000050000000000"], 0x3c, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x50, r6, 0x0) tkill(r0, 0x1000000000016) [ 909.122433][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.132358][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.150757][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.160793][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.170708][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.180759][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.190742][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.200679][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.210712][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.220612][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[c0]: 00 00 00 00 00 00 00 00 [ 909.364775][ C0] sd 0:0:1:0: [sg0] tag#4348 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 909.375445][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB: Test Unit Ready [ 909.382072][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.392059][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.402034][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:00 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x181080, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, &(0x7f00000002c0)) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x200, 0x2100100, 0x9, 0x4, 0x6dd, 0xffff0001}}, 0x50) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1, &(0x7f0000000240)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') readv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) [ 909.411967][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.421889][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.431790][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.441709][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.451839][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:00 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000240)) [ 909.461729][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.471687][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.481913][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.491892][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.501810][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[c0]: 00 00 00 00 00 00 00 00 [ 909.713849][ C0] sd 0:0:1:0: [sg0] tag#4349 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 909.724572][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB: Test Unit Ready [ 909.731197][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.741135][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.751104][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.761085][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.770976][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.780935][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.790853][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.800969][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x5) [ 909.811325][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.821436][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.831500][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.841553][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 909.852588][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5]) fchownat(r3, &(0x7f0000000040)='./file0\x00', r4, r5, 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000110400"/20, @ANYRES32=0x0, @ANYBLOB="db80833c000000001800128008000100767469000c00028008000400e000000108000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 910.128160][ C0] sd 0:0:1:0: [sg0] tag#4350 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 910.139184][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB: Test Unit Ready [ 910.146152][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.156075][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.165975][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.175948][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.185837][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.195713][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.205740][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.215739][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.225997][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.235909][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.246028][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.256021][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 910.265892][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001a1f39a6867ac3d3cba6530bc3fa2bbbaa959fb133ba54a033f58e9b350366897490a2cf07fa1d7cfad23bab21b9d250ed89f7c83f94b2f5ecf5fb4a459c7704539542a14ae8048b5c4fce93703f981c51d6823b05fa505ee4af869de12afd", @ANYRES16=0x0, @ANYBLOB="00012dbd7000f8dbdf251a000000050092000300000008009a000000000008009a00000000f208009a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000280)={0x2, 0x59555956, 0x3, @discrete={0x80000001, 0x4}}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000200000000ffdbdf25010000000c00990001000000010000000800010000000000409c7b761dad28975080abd3be7e1451770540c078582a05c26ce70a3773df18eece7cceff4344afe8874b1fcac91e71f75b0aab09eab01f925627363edb402aec555a37999f12afdeac9f8cc83a3a2bed2bba07c16ee619f5d314106ebe719f08ee2a5de1a3b07aebc96f6e95d300cce25c6aec69ff702b68a52267beb1237d39f5d8543909de1e25c4c00f01713b7db3a7a802a6e9256ece8319d548fc7eb4f2b89e76cddea90d78786d34c62e2f14d8a98e77f48e78a3418b19ae9fe8bc4dd164392007461fa5413b8323dc6778bc8e6dc908fcf4"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbf8, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000340)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100010000", @ANYRES64, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000314000280080002009d01000008000200060000000000000000000000000000000000e413349768af442c6accff7c373624582ff13e663e9f4b91e90e6fb157943e515d07af5254370e9241557453000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_TSC_KHZ(r6, 0xaea3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x78, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}}, 0x0) [ 911.088992][ T2217] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:51:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @pix={0x7, 0x1000, 0x35315258, 0x7, 0x4, 0x85, 0x2, 0x82, 0x1, 0x4, 0x2, 0x2}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x3, 0x8, 0x6, 0x147, r4}, &(0x7f00000002c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x2000000, @local, 0x9e}}, 0x0, 0x6, 0x3ff, 0x0, 0x86, 0x1, 0x7}, 0x9c) [ 911.305576][ T2217] 8021q: adding VLAN 0 to HW filter on device bond4 22:51:02 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6, @in6=@local}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xe8) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9207ac3d78578fcd292a8fcd277cb57f5650731dbaf12ea772d0000000000000003d6c1610c621c85fe3e3485460af173b9bede5105e65b5328de821ef57e8d4306f47f6ea4a656379adf275ca89b94b83f221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac82feaa718c023043d03a6fb4862e0353a7efd2f2d23d90b8411f1b34ce144800897c857c2272248f0604b910806046113d82e6257074807ee943994f587eb64d28c7eb86249403f04ffa8265c76eb17877fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04abe73456e9b828ae419b20f2e7cb670020000000000000000000066e9239a4e344cded8df72bc1b9ab22018000000000000003e1b98da06c1f545bafb01ffa71e6e3888e1abb1436f84c61f937487f1446c76af68b1242547fd0e93baea5da870099a43c5e138cdf9adedd4883674f22ebf9b6f25f27680a977f24040094d32ce2e7c31e37e9f4d5b37d0c6876011b3492ba3619088e459ed8572669d96bd411eb260000003b5a3f96d22ed91c00d715b359610b8021d9a4ce23e89273704cb8e0afe3c87dadd39bda4a43e866f2f161427cdbaff0f7382c9417bd73f92198235f9b214db6e4682d9d1e76cc5d2de30c3a8a33a94f2c9a1e673ab05e99b0fc125854c94dd24d10151c06efe97d5b126566289df476b04dcb5eece75a7cec62efa1f18ed29f4899890e2f71575add5c382f528cd964f536c628ba0a4a82211bf0198bdf53d6b8c0fe8ae40722ac6b3558ff607535c0641d149ec16de347899696c13c778ac424f34b91b7531bb9cfb4277e20fbc6fb17ec735f9fa3d52cee66ddf79a83b901dbb5831fb8c9942c8a84034ca24a7cfa5bd55558dab5af49d6e2aa00ad262a5377a24c4bfb0c88f500e65377e85b28611dd415b9853d3b48283d289c3bb01bb92a5d2537a14fc31b1108e00000000000000000d89b8530d755b8522e3f33fc715059d4426529677f8101b18bbf986c6a92af1a9f6e9876ee54ab05b4392e529d9763f6f38893d839a022beb1fd19c6acd12f7a04ea7a9258365c144691030f958a8b9625e54937f72af9f7286f35cb5639a5ea99de1d77a9d0ad4780ef2259ce90ad44329400"/840], 0x18}}, 0x0) close(r1) [ 911.548215][ T2263] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:51:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000082}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x1401, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r0, &(0x7f00000003c0)='T', 0x1, 0x0, 0x0, 0x0) [ 911.595268][ T2263] bond5 (uninitialized): Released all slaves 22:51:02 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f239ed679280012800a00010076786c616e00000018000280140013"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x9, 0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 911.665474][ C0] sd 0:0:1:0: [sg0] tag#4296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 911.676154][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB: Test Unit Ready [ 911.682768][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.692671][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.702564][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.712437][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.722345][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.732265][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.742157][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.752887][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.762805][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.772706][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.782601][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.793369][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 911.803232][ C0] sd 0:0:1:0: [sg0] tag#4296 CDB[c0]: 00 00 00 00 00 00 00 00 [ 911.822442][ T2272] netlink: 'syz-executor.2': attribute type 19 has an invalid length. 22:51:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x22) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008f40900000000000500010006000000"], 0x44}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 912.086548][ T2279] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 22:51:03 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ptrace$setregs(0xf, 0x0, 0x5, &(0x7f0000000080)="cd") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 912.464211][ C0] sd 0:0:1:0: [sg0] tag#4297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 912.475099][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB: Test Unit Ready [ 912.481733][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.491671][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.501620][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.511611][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.521836][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.531768][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.541699][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.551648][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.561593][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.571486][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.581332][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.596853][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.606708][ C0] sd 0:0:1:0: [sg0] tag#4297 CDB[c0]: 00 00 00 00 00 00 00 00 [ 912.950780][ T2358] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 22:51:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x351181, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x882, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x10000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) r3 = dup3(r2, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) dup3(r0, r1, 0x0) 22:51:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9b26, 0x9, 0x100a, 0x4, 0x7, 0x0, 0x0, 0x4}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8901}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) 22:51:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 913.484972][ C0] sd 0:0:1:0: [sg0] tag#4298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 913.495750][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB: Test Unit Ready [ 913.502395][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.512345][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.522251][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.532195][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.542093][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.551994][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.561866][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.571828][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.581717][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.591588][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.601973][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.611927][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 913.621768][ C0] sd 0:0:1:0: [sg0] tag#4298 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:04 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x301400, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000480)={0xdcf, 0x7, 0x6, 0x0, 0x63}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_open_procfs(r1, &(0x7f0000000040)='cgroup\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="6f11020008200600440012800e00010069703665727370616e0000003000028004001200060011004e23000005001600020000000600020000000000060002000900000008000100", @ANYRES32=r4, @ANYBLOB="080054440ada", @ANYRES32=r4, @ANYBLOB="08001f000200000008000400b1360000080028008ceb0000"], 0x84}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 22:51:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) socket$unix(0x1, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c0000007be867a0fb607707867bc79dde94603fdcfe16f73efb57a4fdf70619f90b74024ec57d55f1af4ba2ac27f2f51095080555ea69059a787fa551787f1fa433b85538f954f6188aaf589258ab4e415b19982e87733199453ff029a7accbd36e54aae66093ba85257f6d5d2838ffb3a49653b808cd2e4482516a1fe48c1edbf5456b733470b41d014cfd096a96518e8efcea3c1321b929912de3494467bd46b5ba8adfc817e1779e258c0ee4a397be8159443d510f0c64ce", @ANYRES16=0x0, @ANYBLOB="2b0400000000000b0000000010001700000000000000003a00"/38], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6}, 0x10) [ 913.854112][ T2430] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. 22:51:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x84, 0x80, 0x0, 0x8) [ 913.914733][ T2436] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 914.161797][ T2441] device veth0_to_bridge entered promiscuous mode [ 914.169595][ T2448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 914.210242][ C0] sd 0:0:1:0: [sg0] tag#4303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 914.220589][ T2454] device veth41 entered promiscuous mode [ 914.221987][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB: Test Unit Ready [ 914.234460][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.244907][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:05 executing program 0: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r0+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) tkill(r2, 0x38) [ 914.254853][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.264712][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.274517][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.284454][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.294320][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.304196][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.314054][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.327539][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.337384][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.347227][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.357062][ C0] sd 0:0:1:0: [sg0] tag#4303 CDB[c0]: 00 00 00 00 00 00 00 00 [ 914.427340][ T2438] device veth41 left promiscuous mode [ 914.433483][ T2438] device veth0_to_bridge left promiscuous mode 22:51:05 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1058], 0x1c2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000018c0)={0x0, 0x100, 0xbf, "e730e6666e7ae4e49be73d871afc793e1489a6023adc06031902894a69a85ca6ac8192b62f1df4fc2e54c8ce722288db792e06a77dc318bd3fb5fece2d053638b37dcd105e96e3f100886f49afc9e343c4ce8b3f739cdf6be337ae3e5223119a5faac2a19153e60c66ace08a8b4720bac7f47e2bca071010acb6863ea04aa18d5ef0363380f913d0f8904141b4cdb492a3dcecc40efb79ec819fee5a4e652340477cf60b441c5af456149028ea2306faf5d9c7ffdd2fe835f7470d87fd0034"}, 0xc7) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000200), &(0x7f00000002c0)=0x18) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000180)=0x8) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000740)={0x3ff, [[0xce5, 0x8, 0x8001, 0x5, 0x81, 0x4, 0x8, 0x5], [0x7fff, 0xbf40, 0x101, 0x2, 0x5a, 0x10001, 0x200, 0x7], [0x7d1, 0x200, 0x2, 0x4, 0xfff, 0x8, 0x8, 0x5]], [], [{0x6, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x20, 0x1, 0x0, 0x1}, {0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x401, 0x2, 0x1, 0x0, 0x1}, {0x7, 0xfffffff7, 0x1}, {0xc2, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xf6800000}, {0x1000, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xffffff9f, 0x8, 0x1, 0x0, 0x1}, {0x0, 0x992, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x1, 0x0, 0x1}], [], 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)={0x18, 0x23, 0x829, 0xfffffffe, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x4, 0x8b}]}, 0x6f}, 0x1, 0x60}, 0x0) 22:51:05 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x5, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 914.633074][ T2468] Unknown ioctl -1033879279 [ 914.689723][ C0] sd 0:0:1:0: [sg0] tag#4304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 914.700780][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB: Test Unit Ready [ 914.707560][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.717471][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.727333][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.737232][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.747088][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.756938][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.766749][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.776581][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.790078][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.799923][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.809760][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.819595][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 914.829407][ C0] sd 0:0:1:0: [sg0] tag#4304 CDB[c0]: 00 00 00 00 00 00 00 00 [ 915.098290][ T2448] device veth0_to_bridge entered promiscuous mode [ 915.156981][ T2441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 915.171574][ T2448] device veth41 entered promiscuous mode [ 915.214068][ T2438] device veth41 left promiscuous mode [ 915.220169][ T2438] device veth0_to_bridge left promiscuous mode [ 915.442800][ C1] sd 0:0:1:0: [sg0] tag#4305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 915.453836][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB: Test Unit Ready [ 915.460454][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.470351][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.480238][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.490203][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.501503][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.512271][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.522230][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.532702][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.543065][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.552833][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.562719][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.574989][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 915.584852][ C1] sd 0:0:1:0: [sg0] tag#4305 CDB[c0]: 00 00 00 00 00 00 00 00 [ 915.612585][ T2497] Unknown ioctl -1033879279 22:51:06 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) open_by_handle_at(r0, &(0x7f0000000140)={0x1008, 0x6, "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"}, 0x103003) 22:51:06 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d00c329ff"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x3b0, 0x12, 0x10, 0x70bd29, 0x25dfdbfb, {0x4, 0xe1, 0x58, 0x7f, {0x4e22, 0x4e20, [0x5, 0xb4, 0x80000001, 0x9], [0xffffff01, 0x4, 0x7, 0x6], 0x0, [0x5, 0x617]}, 0xf, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "f55d960acb8906a2f19a345e4196f20cc75aa77cec27e7520a066161a9c8f339720f6e0d30fc7b0ce4f08a3043ef69e6baef922041220b3a3ea0dbdb1dd77ec296037c79fec9bc0609c8d0b2dcc992e1bfc8766abacc90a6a76dbeb39f3e88cba5eb6c2567dbe24624ffdc909c658f0b2124839249d34ed170b74cf28974d0161518b3cbd4b9e74dd9e2239cc36a762704d9a33213df78b839de18ad2b55c3ab06d89dc681ef889482d38a8dc567115aa541743248aa4643fe8860e3978ac56a6831919b762d23b9bbacd2b63d6a78ac8417"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "41466cc5a17846f45a1871dee85564c658fe4c0cacc5c1f50d7145c3f0b44486d991656894c0e5a0056d8e0ba9900b67e65d0d5dd221fbc6d56515ee58c5cc8f7b53f09051a1ccb3bc5d3c23528efe2f12f03dc82df5414242cb8f47c977a16471bc5356f644b6d2458fe65fd9678b3147f2b2e0ac9cceda9e561cea6ea9460bdcdcd14db11e7f95bfaf6be12ec8b7cc4481705b437df8d21f83f2bb6d8a6d0489c38f226a9144ef1aa2c97ca0df3ebc739e84f29645528219e6ee11dc"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "45c59e0c0a06da116660c811644f85afa9096cb847a2ace40171053098598bab964591bf6580f9001cada9f5ac8e"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "6746ee6faa2874ff3aa533c43d1a37cb9877a2ecf1338d20da6912b681f0e93390547f5f21e95d055a42af028746111ace07a7c5e1774266e2990317820680e605945d167a39453a658a80b91d1cb3a1fc94a2dffe9c9f166ef0b4eb912f38fea34129a1f7b4533d0457b3d909c966d9de97dfe576564e3dcd5ccb22d7c4a6f56f5e12c035453a53c0098094b02d566ec3383461e873744b38a6103b13e3a32a47f0662c5808"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "192336b66ae28e9123b7e99751f413f4d312d378fedfadc30a9fac197d5d4e7aa1ca1508e986955fecdb983311cc4c040b0e5880ccd37d44cb32f06eb9d10d384fe892375e330fd24bdd544c5498361c47fbd59ce18a038c4aeffb7b6663dbd14feb5927bc80f9b9446410c2d81dc8cf88a7905ed0721ad400d0ac4659b881bfe1d7b4943a69f246e11072f2872ecd3cc7ee576bbf0f7bda0e8bbe86656bf9e7ae0ccceb4e3625f98da75cfef5115d36f78795602613f2a84728795c57b45c7a8c09752d58bbb208894d19199603a3c086cf8a5be64fdda3d62a9bd5165fc234b697a9"}]}, 0x3b0}}, 0xc000) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:51:06 executing program 0: r0 = gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000180)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r4+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:51:06 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20805) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB='S'], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0) unshare(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t]'}, {0x20, '\\'}, {0x20, '{'}], 0xa, "ed7c80dca6ac9ddb19f73d5e13b9366ed0c2a7493e8e76cf42405d8775073fa8d2d15398153273813fba063775618809decf0b79c98690bcf52d6a3d6b00be2b0c22b3297532d4a83b292e9ec413ee39ab929f958da7c8d9a9b84b056afe6e322f4f729fb9f01ebb6bcc50d0d0e55a835da0146f63b80fdfd7130cfca482a2738960d3ada90e1e7801ec8c1d3c6d7a3ccde1f28f34254683106edb133e5536af6f54edfd99d222c4fe817e85a31e76cb91fb401ffc15e0c9552df7b8507dcd663b72d3b2b75b1b9d18a4ca99734e"}, 0xe0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00'}) 22:51:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) getpgid(0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9207ac3d78578fcd292a8fcd277cb57f5650731dbaf12ea772d0000000000000003d6c1610c621c85fe3e3485460af173b9bede5105e65b5328de821ef57e8d4306f47f6ea4a656379adf275ca89b94b83f221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac82feaa718c023043d03a6fb4862e0353a7efd2f2d23d90b8411f1b34ce144800897c857c2272248f0604b910806046113d82e6257074807ee943994f587eb64d28c7eb86249403f04ffa8265c76eb17877fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04abe73456e9b828ae419b20f2e7cb670020000000000000000000066e9239a4e344cded8df72bc1b9ab22018000000000000003e1b98da06c1f545bafb01ffa71e6e3888e1abb1436f84c61f937487f1446c76af68b1242547fd0e93baea5da870099a43c5e138cdf9adedd4883674f22ebf9b6f25f27680a977f24040094d32ce2e7c31e37e9f4d5b37d0c6876011b3492ba3619088e459ed8572669d96bd411eb260000003b5a3f96d22ed91c00d715b359610b8021d9a4ce23e89273704cb8e0afe3c87dadd39bda4a43e866f2f161427cdbaff0f7382c9417bd73f92198235f9b214db6e4682d9d1e76cc5d2de30c3a8a33a94f2c9a1e673ab05e99b0fc125854c94dd24d10151c06efe97d5b126566289df476b04dcb5eece75a7cec62efa1f18ed29f4899890e2f71575add5c382f528cd964f536c628ba0a4a82211bf0198bdf53d6b8c0fe8ae40722ac6b3558ff607535c0641d149ec16de347899696c13c778ac424f34b91b7531bb9cfb4277e20fbc6fb17ec735f9fa3d52cee66ddf79a83b901dbb5831fb8c9942c8a84034ca24a7cfa5bd55558dab5af49d6e2aa00ad262a5377a24c4bfb0c88f500e65377e85b28611dd415b9853d3b48283d289c3bb01bb92a5d2537a14fc31b1108e00000000000000000d89b8530d755b8522e3f33fc715059d4426529677f8101b18bbf986c6a92af1a9f6e9876ee54ab05b4392e529d9763f6f38893d839a022beb1fd19c6acd12f7a04ea7a9258365c144691030f958a8b9625e54937f72af9f7286f35cb5639a5ea99de1d77a9d0ad4780ef2259ce90ad44329400"/840], 0x18}}, 0x0) close(r1) [ 916.045597][ T2533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 916.063860][ T2533] ip6gretap1: activation failed [ 916.068814][ T2533] device ip6gretap1 entered promiscuous mode [ 916.077658][ T2533] bond3: (slave ip6gretap1): slave is up - this may be due to an out of date ifenslave [ 916.178587][ C1] sd 0:0:1:0: [sg0] tag#4307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 916.189349][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB: Test Unit Ready [ 916.196123][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.206031][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.215943][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.225889][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.235839][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.245710][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.255588][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.265472][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.275784][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.285914][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.295787][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.305652][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 916.315512][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:07 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x1}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001700)='status\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = socket$unix(0x1, 0x5, 0x0) io_submit(0x0, 0x7, &(0x7f0000001980)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="6fba4ca539e6f72010e404c05b4568035a6252cdacaf163d55c8007c73e13e24fdcf6bb16e63df1137abff74816ce9949a79a4397b36369dce84061c886fef61855a2729bc83f2683404fd3a2824f4281641e38118d007fa5b845597780c84c1b080098ef0a6898986acc33f6b39b929cccae94aa4dcba88733c7982c3f5cbc8e01f6ad715ba0711c05d1f70265ec45cf75b9cdb893cbb58dde0db91b5ee9550212251f890f7820b400cc8da8e2e5ad5e97db17c4c7bb5edcc56a4c0b9f93dc803c3317f690658d07a4e02d3237b4fa5e593857ed62f44b84492e37eb7921913", 0xe0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="2f837bc06495541268ab56d51dd16e94bb8f7100a7ce36d8ad1a0494b266e6effccb84e2c6341a9bb69510f4892fcc603d6b21ed7be902bea531bd215a07e47d0311f695c9e9330468ce72d0cacc1db2acf8b54e9daa9e4fbdd1821e8b4e89c03574ff984a7ace23114cbcf34bc4631ee1b6c43a9fb156fc", 0x78, 0x3, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000000480)="a5cc352ee1cb12d5a1dadf99b6b1c55fb9b3ccf07377d5467c6e2a7d404a0e56909e8504456102715c063a2a3e68859299478d343c90d29d64e693bee77f0040ab27ff327b98f05e66300fe3e4145e3174b6195bfb9152ee2ccf993f8d95ee57194718dd2cf73f0e0c3628ccf98121eb1a4ee30ec10a599ec62f7809d9ed024c8fa30a637e98605736d2763e0ccc50ad8e4e0ce3943cacc5b2f30583b08c94fc964a16d334b7f9f5e73a71d2fed6d63e435c0bf8fb4ba6518d4c5c4b750b9f01b5a0501511654ba14c0943a29c88c99881c7fdac57a3f1f4", 0xd8, 0x5, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f00000005c0)="1263e73d6833b885aee628fed8f7ffad83cbe1e2c6367f17dcc37e7632134e49fee78112cc2464c7e58549cc034e6324658723900053a2c05adcb2c4f8603ce47ed9b75ad92e3d43f3859c66702681c4625067bc453f35ad379d48a4382a4148c9c3642341f0bee4d0def0a360fa06363544e57d63e1545e8a7161fb939f8735bff176c8a6cbc6569f01c30de3ef4624e10839083a47a377a9c84e9e431ea9dee08e675dce912e23f19b779b8f5c79b2ba6d6df65cef39a7531fa9d1fcedd747d09001c55109794802e67b7433c512beafa8692cf0ff19e2bd2d2b3d90fc85625c2fc94dbd201133a871fbcf1ab73624b494e119a388eff7cfc8309d3c9aa33ffbb76584c2a2db455c4a7cee4ae47d3acb68ef5112681210cc75fc0e80fbb22ce2cb93b004ad0aeac3fe95ea44c7436c2469b3ae3e40369ebbd9eeb250482df904ea8aa514a11d86dfd6202cdc7e7189122a5d8109969d125fe2603e2e97342f6a348083bc08fb10d660a67ae7473453b33f38158f4f0f5234f262430d9073d9cc9c82237c0e16edce35a36526592f25a358cd860c8b12b75ff769ba00e9facd482e3a471dde35b22645cb5d083ad3e4ac6aac7c8feeb05e7dca814ea658763f5385499de721a77c0ca06acbd25a715d39a05b543e86d24927b90aebfcff7cb16430ee98fda51156796fed27fdbff81e37b123ed5f35a90e9906401c398441cc27528312bc3323596ecf06f0389a59f4a4bc0ad7005c1ceb4add29574a5297b64754e9d445700599b76afcc9c7aaa2bb61361e9c90999f1177cc279b7ddf8271a8790e8c9aa7dbbef3781c442953a6859be7dfad5a42aaf74cd5fd441ec2f184ecf967c6b5c11c4bf987e038362e44b7fb4c1647ba3c20d8d354d7d88d3691323b3451043af417f5d77ebf659170b4d861ef2d83761fce70c980fa9cc6623eaeff5ab3a6b44acf053cfb5ed9e082ad5d1db0eb7f87538b6c506fea048849839ca8108dee6c4ed2803d6d6ee249ad8fab833803ac7e3b8032ed6d9cfd6b5a8f304eaf69012004dc714beac7edda42235db99e3829dfa11cba1fc70e3146a69dd8ac9f0ff27f8e589ba910a2d079b236fb3a9549e001f6db777818a103de0fe22a85a6825be17aa41ed2c6515d1c5d10475fb181d9d35f53c2c7e3a78dc54d0cfeea2a84dbbda2cd4883739c4153b30336058992b2158a9eaa87241559decc93a23c016ba14f35870741c9c447289cfcbceddc4b792fc7d2e8c0f5956134e85a27838ffd1bf4c426e4d6693f1ca0d1a3b59cefe390457192d2cec5310faebf6ab8c3eb95422494a6ae46eaadd61a38eb50d85ddcbc3d515c2fe79d3a8d7015b118919d34a788836361cdf6e9d14cbd9d36dbe1261d3d7ba00773a0b17b72bc875c48065c7fbb94294e6890d3c2569b7f32891c36768d32bb3b69b4a5c7d7d5106c8cf4e6560714544300ea25176b198b4a43581b9ee02fedd5652b5f4929eff18a8183323001a972e717e2e4745d4f6d1bcbe0fac0e1b3c4cbd8dcb14e5c980f74784e497e7fe5b6cc32b50ba44cbd6b43b00e18e41067b0664ec390d5c695802b89889c4fe538e30d7a8d154ef338c1375e46d86cfe6c21d2e46b210e99c0524311d6b190ea34618a53bdbf5d0bd7a3bc5ea12b8eb594d59eb1fd05bcfb22424b2eaa7b7d37212f864beb0a5a63554406a0a299ef84ce8cf383432ecc990bbcd84a3f23917e599d56b6c8d570bbb5cdad64a8e4eee3a95c36b6a4cf7707ddefd96a2de5601155707785320543ec2694e84c7689d29f8904f3cf622d9a2595497f8d3cc2ebc05d38f737c78e864984332d1c77746da99380a4b2eaefad61efb6345bd04687edb3b02a43d30da9f6b89b75c38430b16c82db5f54b3df4fceed7fbccb34e21ac5be250fb69fca8c9180f6c913b177281f9ba0d59341e6514bea9617e2bf01987368025a77f0940a87fd91bac0d2699d46c0b05b251b90f35dd66346dde1a2b9e6a28bf39835c83d6caa07b2f492b084f03df7286dfa4a85aa18d58ee7e27de83082dc58124e3f586fff5948d5c15c9008d5cbb6ab6044e827f6f781070c44e9240cd5cdbc478b566895c8a9b495b9535950425d4c4c2a0a5816dc503c61c3d9b20a8e32a0f5c07049aa938bc84ebd2bd1a4283e3db642b40256df58d4e1b8ad6645374bdd7c3947d211e521dc69f9ff3c1d8c20947154fe9bfb9dc4cb511efdf10cf44d9b9cbc3b6afe25911581ed84028ebb23caf44f80657d14e37b1f04eb4596d043f0287636ea4e1f09d802aa704d80f98ec45b66a262a1ec82bdf9077f3d73dfa0c0b859526bd734d970fe5ee2c7603e6886d739bdf97987123df2036b46b8a8c73e0990ee42caf22e27d8a1836daa6e63d04a8425d67b1f7f003e112f6aa6092add789f9643155c869d00c78d4fe1e92a1ca22305edef2ae2d0711142c9ece24644c1ae3821e92e56c8e078425546deb939de562516bbd9da806526a487bada961a0ba935e1fcd23bf267ef786d88a94030a5b1bb928cf6c13543cbf44c012b732a4711a509475d7ffa6dd13d7bf238bb8e0b49d2538fea306100fa7859d97342e96ae10fb368a8016cb03f02a64d43aaf26b13c4195ad790bffbe2ffd972064055d0373ba7fa66615904f1a3754a899fa61ec29ccb34cdac459aed6bcd8678315552e1b02695ce09f93267b112be18918baf66ba41210b8faab6854b95788a813c93802f7694ee4b966da470ed2218fd7b1d595edbc286be6209f3664293ba25039bd615a5cc443230786631cb0a7b9d6cc4caeb81d92c3f459e983af6513c601bb1acab037ea9eab43a0f570379480862d5b40c0f842f0c376a9a5fe5e03a76ef011bc3d01e6dce6c31ea16e17fe348906590534eb78bba1d6f5020fb49e1bb8e6ffe20baecd4cb8392d4d4ca18b7d6d46f30399c00c8658b3f57f54951c0f5031a62b1671c399fc61b5353c89c37bf8e13753a2690b9e5633089f10d3580e39fb2db5d6eace6a0de7d26b4a402b143f79884399286523a4212b258e9ad95661cdf6594aeb156aa153f9a2a8859a70da2aa517dabc4599a5a182f59be070cb32e47ead1b867b32011973b87d9509b54768b14e5ad8b78696b9a59ea06bd660925f25444acfbcb5fc00d7940e73c217e816a3d38b6924f022c38f7a4a5aaaa3b55c51735c3b6b39c3da480609a34b9c237546fa6248b91e7ddb8a55610ab418612f2c3f7d701b257e4d9ee080a54440bc17326f13eef9e6d0c7e6154bdeba9c1c130fcd368aa3d29bae5fda001e474fd5eb275ec10e5cea53c94d49ec0ad5efc9883a85222ca5690450481ac3c280bf9d35a40786c40f6ba04edbfdb0da33252cb38495736f9cbac4d52a9f679b675b189506e6ee9656e1ce3aa7172b5cf75dc8b093d8e81ef054da8134f2e4b2168247265b1b92498e2b8aa10b7f404fc9c917783ba04e554c5c64a9a1bd6a601b1fe1e410b032c90f8721bf39715fadf91f124adc7bbe013ecd16e5d3ecf34905d0c27e78f1f7879a711f9ae7847c75f6d77d1631a64cd859c493493e90a62bd3c36eabc7f5857ce455d53c2ef16d825b6f656b784e53b12d628558128927829a8bda46b509eba5ec01561d83f309bc47947a69789ccbe8321cfe573af2d5e388916858b1c7dad95e983c7531ff3f23d458faf0b5d786bbacf82df4becd81708b6c0d14d8fb7d652d78efae064678d769ffafbef1d1097d90e63ebef04a15af1ecc3b75c8b980ec2b3e91b9d73a53f5a7203208771295abd30f1aeb87f3c8b6da6494bbc42d98f4955918cff09997f0b176c3fd41619d55e37a8d3fe6380903bbb2ba4edbde0959e3928f7d38b280b27e551b1fa9f7aaf1231d7ef41a73b17ac238989a9e75941324e2fe320b5277ccaf67aec8d7c3dd1cf24bd5094d801a16e6c0f2122e0c628271ff76164eca8116e716a7dd58d38c00aef56f58f4ac96773792c816a9d3170b37c41c3af6b2e50df32cdb0f8affd9986bd8022da19276cbd43fab1e4d0405e0d864e07dd1754d80974dedb9cc1df336031272748b3ba27ac007ce31eb18103fca1ac3b84a2fc83598ec8b2944567b989a9bc67e8e96ebbd181606e22e15cff35471be14d44c18d04b2adf4b330f3424ceb6ece183d748ab458d0b59673810e28626d8583563feae9693ecdf30f65a4e6d99b960eac46c28a05ebc67f4d8359cc183c9693da7124c38e8763ee44f4d9614a867ba1c905df80d86ea21f6888df1d2e158161b45d0b8d88af92c73768494780f642334e0049e5ef69df9d47a0d5b387cfce0888ddfd3dffe493dc27c61aedee69917d3a93a9c36d90ac89d9b9c9b87c0a4a8da444a9f8659eda48257d455c84ea9e017e9fbfadec5ab53f1827774198b72f9b22e087d934155dcb489ec5fa56bbe1f1e77a12143f5f9b5bf518ae79be85e9175f8cdfdda256346703ed94da24f62d63171b252c1633330333ffc5799f0a94a7198433351928f7f8ee9fe021042c8e907aa3fa161a38391030dd882cd0b3c1ee0c2fb2cf4308dc130fde3bddab41b9725b6e48a0aa3a8b5dabe5b77c74d47bfa753abc618500dae48fe45d682f042b9a353462108645e3ee8652b78d4a6624ee4609605184f9f61449c2460f0fddcd019e3fcab2d7d46cd5a1c6b29ed90cf64ccdce0c61512e3df6b61dfe0c5c5bcd31881919b969a4d151bcbd645416e63d1da546ba8f141e8a4b0389ccfa8f6c4cf2c8bcf1cd82ef47c2a267b0948b680b5428fa6ab628d8e8317ce9f79bffe84b089cc34ff3e956373e9271c6e5f2b81fce99f9e9837fbd352993b5229dcfb41433e1c600580a23c1d19974a0111ce7a5989267fa58fac72be200cd8682fac1e5adce85417730ca0cc8384dac666f0c0aa6e552ac6ef5f6d4fbf0643eba53f8fc75a833dcb24c26268e9513dbdd8ae6c65b6edfc8d7685dcfd1c4646f6138dbbd6469310b3ec1f423bb408f19a4831051705cc23815be7bf913e2c99fa2fb197f6263d0bdb9223a8f699557eba97d95602440882934f0a4c87b3a45ad8c396f1ba2928f59114c18ae8a7a10e91749f2eea7a3acdca740cd931645961eafdb9187062384c693fdb73ef2d4e3a7fa0f11cd014fd4497a7c14b67f2aebaf318ace9c5a5572df591f07762fd2529d7e6acdf1d3e599014ed87c325f04ac5fb44f83355a6143bc56132c460ee25d6e9fa71a41b9788bbf65f7e46ce74fdfd025fcbae924385115e7b2af06440a770f1e39295d088d555f768c8e965466fe48032151fef120f767ecce9051ca149eddfd3f3d105b0187117e09808e2a7b2aed00d4b749dd76940bdf0a9b6002d089de0e6ccc83d7e99c672566b9ec115b20b01ed112a1cc1356d9534df88c2af16bf67056bd078b92159f00c2fe4d9f48d13596eb3607bc938828d36e7c017361f2c12160b56991dc4ff0df1227fc3d6fd779181b758c23dc06bd63ed24bc1a69fd236816ff80ce1084d64a8cf4cb87b51af3b6d7dd136c411a86204ee8e95746dd8a883d811b6a2861d331875cfe2d4cd15ff9da38ff79ecfe526af3aacdef1c6901759b8ca1dba01cd2d1749e774a97af57fe0bf40c0a756a5841543ea60e4e00735c8e070f121ea3073dbf9ae1832d01130e078532f9cbdc4948ccc4cc28c52ce43abb411f97ea0a7be6a903b9e580373badb15471f12201e01ba1ca52289e1b3b09e77a50dc4470ec06a6367e61d0570cd8d05279515d2a1498ef7281255e0786202adbb9861fc0c5ce4921f37c8e302549685232b0bf6ec8eb27e98ce2b223afbf7db1", 0x1000, 0x8000, 0x0, 0x3}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x800, 0xffffffffffffffff, &(0x7f0000001600)="9b3cf944f68a8107e062d62a811310f2a51dc38c59713d31b5b8be61f314c2adbebead0acd29387c7408b5da74aea38ee36a57d0b1adfe363cd18dbce6955866be7dfd2c20bdca16e69daf91f3ff8993f6eeae102e51a12a2e8bb3127de855840bb4ab61cd39996c5f92c8136f508d03c2f60a9b4e6b18afb92ede52bd4a61f03a06b26c4c9211674aff59000c0477435d58e0f991c0c73c6449e46e1f7fb4bedd6a58186da3bd123720f3e3970d842763585d5baebff1f69a6bd993f1ce1587c47584c3", 0xc4, 0xffffffffffffaefd, 0x0, 0x0, r2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x8001, r3, &(0x7f0000001780)="9190931eee2f682fc122e27f683d61dcb5139e95baa129521686127b9291d57fcdebd5fb84d242f12800f96863d0fd48563e059287c8b3ad8803259aa50d81a82c97d7b811de2e6b446bc4de259b9797b1ba906a9928c580d311ea2c7f0972cf378ef700762e6a0bc1400ba43025d4d11d45090b37f96951a3e4a0ce2cf7e8b0bb8a4f506b5d2e8f39ae9541461202c7ddf134828ec203e74791c8b6e07aa06a7d027ae5dffbc9b36f5dffc8c32ac2a867a60625988dd921524a3bb6b9f3a9eafc2d86dadc643dd6579d248bb77604c1eea209152c41e397b937094b6824def75aa59dbac050f8b963843ffc6ed611e748fd5c92259cc4958d1cb9", 0xfb, 0x780, 0x0, 0x2, r0}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x3f, r5, &(0x7f00000018c0)="a49a2e638aefde33d0ef33739177f508d3fe5ce9c822cb3af91bc964ac9b213a5381a92872b28bed1bf2bbd2a30291c6b38e946f61f911d153edb3ad79efec687ff6e3a883545b5f6c393350", 0x4c, 0x100000001, 0x0, 0x2, r1}]) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400290600000000000000000a000000", @ANYRES32=r7, @ANYBLOB="080008009c00000014000200ff"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 22:51:07 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88680, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xa8, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x754f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc46f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) close(r3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) mmap(&(0x7f000063d000/0x4000)=nil, 0x4000, 0x1, 0x200000032, r5, 0xdedd8000) tkill(r0, 0x1000000000016) [ 916.981114][ C0] sd 0:0:1:0: [sg0] tag#4309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 916.991821][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB: Test Unit Ready [ 916.998570][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.008442][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.018316][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.028189][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.038036][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.047907][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.057783][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.067916][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.077986][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.088276][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.098117][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.107993][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.117924][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:08 executing program 3: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x92, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x155) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) clock_gettime(0x0, &(0x7f00000000c0)) open(&(0x7f0000000080)='./file0\x00', 0x600ac0, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="d22636acbf56e80b84268e2136f39be9f718", @ANYRES16=r2, @ANYBLOB="000228bd7000fbdbdf250c000000000000000400000014000180060001000a00000008000b007369700008000600010000"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x63365fd52eed70d1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="486aea17c8a5be8dc50d9c722ade616f075a9bc03fd64ec63d3dd6977438713c0c000000", @ANYRES16=r2, @ANYBLOB="00012bbd7000ffdbdf250400000008000400646200002c000280060002004e2200000800070091000000080005000300000008000900018000000800040000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000000) close(r1) r3 = creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000100)=0x1) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000480)={'team0\x00', 0x400}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000400), 0x400) 22:51:08 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x20c00) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x5, "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", 0x5, 0x0, 0x6, 0x3, 0x9, 0x6, 0x1, 0x1}, r1}}, 0x128) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x149c03, 0x180) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x40) r3 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x103100, 0x4, 0x4}, 0x18) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000340)={0x80000000, 0x5, 0x743f, 0x1}) r4 = accept4$unix(r3, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x80800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000440)) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x80010, r5, 0x9b7c7000) r6 = semget$private(0x0, 0x2, 0x0) semop(r6, &(0x7f0000000480)=[{0x3, 0x0, 0x800}], 0x1) getpeername(r4, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x80) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000580)) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(r7, 0x6) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) 22:51:08 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) write$cgroup_pid(r3, &(0x7f0000000080)=r0, 0x12) tkill(r0, 0x1000000000016) 22:51:08 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2, @perf_config_ext={0x7, 0xfed}, 0x8482, 0x0, 0x401, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1c2) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100028bd7000fedbdf25020000000800010000000000080001000000000008000100010000000800020002000000080002000200000000cbbb8ab8b73727333626d1047f95429a680e7ce23a3ae9f10b8b8e707f7d12146bdf01e0545d805e93c39bf4c2bc84a0853c6e7cfea87f26f5335b029f48ffaf3c0ad11f5331ef9239b53dc00cb45ab3cb9eec79bf3e93a9388586edd61faf8b843d9f547cf8b9cf0f1dcaf47ae61e7decdf00fbdf8af5571704dff037bd18bb51e36b23fcf806"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000880) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000f7a000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r4}, &(0x7f0000000100)=0x8) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000400)=""/169) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x1b4, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@nested={0x19e, 0x16, 0x0, 0x1, [@generic="5841aa51b7b5409885ecb383fc0b8d74121a747ca092dcfe2cacade379a099bf2605000000000000007df806f6b109b4cfbb7449816b644ced0ee8a868b1a65d468a21256d4acae064e27158ef270249ce636df8db6368f2ec4be157dcf63326e4d0f29ada44727d9087409b231e20ff4f4bcd0b975b09373f18d3dd0e1c0f5df854b4e125137e510cc70071bcda04ecc193e31b707d0dbc7d59b9cb376a3009", @generic="9ac084ca577b97ee42eed73e26418461b8cfae54a49fadd0efdac44134fd81636572", @generic="63f804cc3b3c178a9ce201d919707d2d966e419726bb4494b3cdf2de4898e40eab9596490fc53af6d159a5fad8718c2a3b85a34586bf48d0f59358badd1c9302b0d98203d2d87d6683557a7cfe50e879e04d95b7d5919bf821edacc940849f3fa2588a8c3e86be60b9c0114f9db445b9dca08a7e434d5cdb29027045bc5c40925916aa622b49f2458b2d87dc4606096e5c65c87a909277b7199140978b587b9437ea783a49a6576d0a3f01e5e0276c7ca4e1fe176c636622d4531002d7d332edfc98d61b74aa499087fcbdf72da7616293916ac33b9457f9"]}]}, 0x1b4}, 0x1, 0x60}, 0x44040) 22:51:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800000002060100000000000000001d00000000120003006269746d61703a69702c6d416300000005000400000000000900020073797a30000000001c000780180001801400ffffffffffff0500050002000000050001000600"/104], 0x68}}, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0xf9357d6cdbc6eb17) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0xeda) [ 917.680707][ C0] sd 0:0:1:0: [sg0] tag#4310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 917.691517][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB: Test Unit Ready [ 917.696463][ C1] sd 0:0:1:0: [sg0] tag#4311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 917.698216][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.708664][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB: Test Unit Ready [ 917.718396][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.724956][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.734623][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.744976][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.754628][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.764307][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.773985][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.783682][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.793362][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.803014][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.812634][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.822275][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.832204][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.841878][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.851549][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.861239][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.870915][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.880587][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.890264][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.899935][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.909604][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.919289][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.928953][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[c0]: 00 00 00 00 00 00 00 00 [ 917.939233][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 917.956509][ C1] sd 0:0:1:0: [sg0] tag#4311 CDB[c0]: 00 00 00 00 00 00 00 00 [ 917.990259][ T2612] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 918.031286][ T2619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 918.508785][ C1] sd 0:0:1:0: [sg0] tag#4312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 918.520778][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB: Test Unit Ready [ 918.527492][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.537359][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.547226][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.557136][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.566999][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.576884][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.586762][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.596646][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.606538][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.616578][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.626447][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.637195][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 918.647065][ C1] sd 0:0:1:0: [sg0] tag#4312 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x4e22, @empty}}) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f00000001c0)=ANY=[@ANYBLOB="ba"], 0x78) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) setsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f0000000200)="5d195f0a5a763c2ab7a3fb1982fb2ab8d876a3a0cf179178938bf14349d43d0118294edc45dd76e3880c50dfc5149d1a2cfaf4817dab70112d7029fb8314fad7c94daa604d55737b0d8f630a82ea19ea0ef0e5a131fca1b7196b13c9b49a5e0d23ba84f01b640f7632fe7beeebb3940edaa1d77e0ced81347224dec81e4424b9f6e5ca5b0a56e79c01914126de7e556ec1d7ccbf61fd3d9b5e4289e55c2bc8f5b751911fc74cab03fd8a7c36849880979c34de08e9087ae995bd2908dbbcb70508c07f5d0f13c5", 0xc7) 22:51:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002540)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) exit(0x7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = dup3(r0, r3, 0x0) getdents(r4, &(0x7f0000000000)=""/84, 0x54) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x5, 0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x2}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x54}}, 0x0) 22:51:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec0f0765f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000100)=0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @ioapic={0x6000, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:51:09 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x28, 0x4}, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x82800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) sendto$isdn(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="01800000a6020000a6c23ec32ab2bf47a001e349119d93f6e4e1d6651a158ea07aa9ef034229f8f71b736dd2c0aecb4c77cdbbf9896d9dd79e676de83f723a3203d04546f291b358f37243b5718bf3cbdef8d0e599e73f7bef8181e617b00898c5aaa686d466878a73e4e3b808f9c8594f6c79f9749c705738e222590642efd02f72b466b9dd71ef35279b3f139a0613ce80123594885531d4a5464c2450e8d8d1cd2d9b85022dc727717a7c18e293fe9f62a1e6936d572b50f07ebfbb1601fb39a14b6c7b3a0d27d9a9ae54ba3bcd1ba236de7c7b2bef2600930128c18935600bf4b9d7188f33cc6e20d838812d0239004228"], 0xf3, 0x80, &(0x7f0000000080)={0x22, 0x2, 0x0, 0x80, 0x99}, 0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', r6}) tkill(r0, 0x1000000000016) 22:51:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="48000000140081fb7059ae08030c0400021100b9eb1b870100000000dbd78fc0adbd7c493872f750371ed08a562ad692c3170f787a0346a25ac6bfe74703c48f93b82a0200000046", 0x48}], 0x1}, 0x0) [ 919.211163][ T2666] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 919.221488][ T2666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 22:51:10 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x21, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0x0, r1, 0x0, &(0x7f0000000140)={0x98090c, 0x10001, [], @value64=0x2}}) unshare(0x40000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x40005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000240)={0x0, @time={0x5, 0x2}, 0x4, {0x0, 0x20}, 0x5, 0x1, 0x8}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000d40)={{0x2, 0x0, @identifier="c989042dd6fce0a12828e6b5e8ccec2d"}, 0x1000}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 919.668939][ C1] sd 0:0:1:0: [sg0] tag#4313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 919.679694][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB: Test Unit Ready [ 919.686568][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.696494][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.706481][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.716404][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.726994][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.736909][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.746901][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.756751][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.766636][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.776531][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.786425][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.788855][ T2679] IPVS: ftp: loaded support on port[0] = 21 [ 919.796264][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 919.812498][ C1] sd 0:0:1:0: [sg0] tag#4313 CDB[c0]: 00 00 00 00 00 00 00 00 [ 920.447045][ C1] sd 0:0:1:0: [sg0] tag#4315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 920.458382][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB: Test Unit Ready [ 920.465131][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.475138][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.485017][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.495798][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.505801][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.515726][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.525582][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.535733][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.545812][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.555936][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.566434][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.576431][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.586289][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[c0]: 00 00 00 00 00 00 00 00 [ 920.623874][ T2679] IPVS: ftp: loaded support on port[0] = 21 [ 920.650305][ T2713] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 920.661000][ T2713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 22:51:11 executing program 1: close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x44}}, 0x1040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x62, 0x10, 0x14}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) [ 921.196886][ T2745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 921.287567][ T2750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 921.401260][ T2745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 921.427671][ T2755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:51:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x4000}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) close(r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x80, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) [ 921.884595][T14314] tipc: TX() has been purged, node left! 22:51:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x5, 0x29, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000c9401c291e298b7b789f354b8567a3c73e430a4755690b7165c99195300419bf2c2f343aa04d382669f27ef68676c49aea5deffddf27b2bab", @ANYRES16=r7, @ANYBLOB="2b04000000000000000001000000000000000b0000000010001700000000000000003a000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}}, 0x8000) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r13 = dup(r12) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 22:51:13 executing program 0: r0 = gettid() timer_create(0x2, &(0x7f0000044000)={0x0, 0x10, 0x4, @thr={&(0x7f0000000180)="ad1dbebbb1a7914e23b9af2b182af80172e11443c1f120612581bdfd8cd5aaa925298fad0ca211b723866b2f823def278e23989aa366b5211da659c85f5aeed7428e6874d528c3c3c4191f44c255eb92235e33051a7ac309ee894f7dda9ca035b484f80848318e749dcc40b8562a4ae4fd3c86a397568fa3ef903e7ee8cbf3f8680f", &(0x7f0000000240)="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"}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x6c0400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) 22:51:13 executing program 1: r0 = socket$inet6(0x10, 0x2, 0x15) sendto$inet6(r0, &(0x7f00000000c0)="1ba0000015001d0d89fdc5cbdd041d8e825798707bed4dca14a7960f0f8ec8da78031c7660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c593df1dad02828b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0x6a, 0x4048010, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @private=0xa010101}}}, &(0x7f0000000180)=0x84) 22:51:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$getown(r2, 0x9) ptrace$setopts(0xffffffffffffffff, r3, 0x16d47739, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b000000000000000006736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d276014ae40b8ae4f2a88d2fbea75e16a2000063f026bd73600daaada5a1f971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2de1a93367a4de70cbef97aee055224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bc30e8741623a7853e3d037efafd31492e0c321227df924d1c890dc70895f2f7c8e6efa2c9a5e6f1bbda951489084c5ab2795ef76f9f5ba1aa00100000087c7af0f033cf5987b9e0f1b2672f980bac0f1225cfe459ec048299403020000000000000020157ef3849ece286e0aea2d3fcbad4ca80b980d07e2e5bfe4f63c60fb305a602a966493d5442f9b6699b33efae59323fd6695c532fa51ff12740665fb1df8f1193483f3462595acb7185f97fcf0bdd88c16914f26b2c102448b0e8b9d59220e"], 0x14f) setfsgid(0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 922.928580][ C1] sd 0:0:1:0: [sg0] tag#4319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 922.939333][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB: Test Unit Ready [ 922.946097][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.955994][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.966009][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.975961][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.985827][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.995829][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.005715][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.015583][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.025445][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.035345][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.045210][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.055096][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.064964][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x18, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x1ff, 0x1df, 0x1, 0x5, 0x9, 0x10000000, 0x1ff, 0x8000, r6}, &(0x7f0000000380)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r7, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x18, &(0x7f00000001c0)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x34}, 0x400}}, 0x10, 0x3, 0x8, 0x10001, 0x2}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r9, @in={{0x2, 0x4e23, @private=0xa010101}}}, &(0x7f00000002c0)=0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x3e) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x401}, 0x8) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22:51:14 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000058c0)={0x0, 0x2a, &(0x7f0000005880)={&(0x7f0000000140)={0x18, 0x1411, 0x101, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x54}]}, 0x18}}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000000)=0x3f) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) [ 923.368254][ T2796] netlink: 'syz-executor.2': attribute type 84 has an invalid length. [ 923.410338][ T2796] netlink: 'syz-executor.2': attribute type 84 has an invalid length. 22:51:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') close(r3) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r3) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd651, 0xb793edc259f8569c) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x8080) r4 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000140)=0x8, 0x4) sendfile(r5, r0, 0x0, 0x1c01) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0x1}) 22:51:15 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r3) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000082a0b4e970fc0758b7950309bcdb12649efe3041f8399a6fe5cd8dc71ac03a135fa5a1e78a01b09f8b282c2c4732c139d8d0699aff896dc0a2019e04c6bdef7fed322", @ANYRES16=r5, @ANYBLOB="01002bfe665d00000000f5ffffff050005000000000005000500000000001a26ed0fc94a9ee539b64b"], 0x24}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf25020000000800020001000080800000008e070000060000001800040006000000090000000900000002000000db8300"/70], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x448d5) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="ff0f0000650cb7c800008367afd22057c51a041c3a89ff2dbd2a715b0281ccc812ecf0b069b4049ac3d55f63f1980c7c8c1fb83c2930f01bd944ad306d16364650027770ab53f044fcf766e6c648af951eccb0f416e11149571318f12804bc6aa8a6dccfb40e5bb00900000000000000867d475728"]) r6 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r0, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @private2, 0x8}], 0x1c) shutdown(r0, 0x1) sendto$inet(r6, &(0x7f0000000000)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 22:51:15 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}], 0x1, 0x20000804) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) pipe(0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x540c1, 0x0) r2 = semget(0x2, 0x0, 0x59) semctl$IPC_INFO(r2, 0x1, 0x3, &(0x7f0000000040)=""/217) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000000080)=""/32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x10, 0x0, &(0x7f00000004c0)="e2e9803f8ac75d52e59c29bddcd5165f"}) dup(0xffffffffffffffff) [ 924.916281][T14314] tipc: TX() has been purged, node left! 22:51:16 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x90}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xa8, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x18}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_conf_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1c}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x20008891) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3428bd7f9c", 0x5}, {&(0x7f0000000200)="9c93093523b1d31d5cbd25cbad174ea2fc23da00000000a6cec836c6", 0x1c}], 0x2}, 0x0) recvfrom(r6, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) 22:51:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x59, 0x57}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) 22:51:16 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xb}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:51:16 executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) socket(0x21, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x0) shutdown(r1, 0x7fba12080a2ee945) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$NBD_CLEAR_QUE(r5, 0xab05) unshare(0x40000000) 22:51:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r2, &(0x7f0000000280)=""/68, 0x44, 0x0, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x3, 0x1, 0x3, 0x1}}, 0x80) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000000c0)={0xc9f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000b000100666c6f776572000014006075a7015de4cd7be2a06560400200100054800700038d5200005adb6ae900f6e43d6e733e75511ff79d7845e0fc44c375ed70f4e69fc50f9f76480b878ea563c5c09e3b2d9194642d4e589a60ab16eceae496f39374e2512babc8eed02f4456eb849e30b10000000001000000d44b8c0128078ab40f5f98263d1dc9e010b7ad4ee8bf3e18c94b6726e23caf65befab47daac54c405f8ac8b57a6a720018708119b71a18731d49e8ab3c46e1f9f203dbf38fb2413934a42af28367a02dd92405738a6012075fd78dbe9c40980631863460ebda89840000007155a7779f3cdf5c11f8f6dea9b72168c21463d7c6d468757c953836d5b3b5ca22498855d3688edb678b17dab44ce4ad830918461c249f18765a720ce2b4e51262b608df6ee1e1fed3e367d5472e1a70f5ed31108ae408f418620af5891744db67bb30a205afe231822180ecfcdad8827554dc17f3ba7aa01dfc58d79c4bca4b48a52bd949378b0dd55700423cd3e55d076df13ee56b72adccfa0b"], 0x44}}, 0x0) 22:51:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)={0x2e, 0x4, 0x0, {0x3, 0x1, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) [ 926.170545][ T2841] IPVS: ftp: loaded support on port[0] = 21 [ 926.224115][ T2849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 926.561240][ T2849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 926.874558][ T2841] IPVS: ftp: loaded support on port[0] = 21 22:51:17 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xd9b1, r0, &(0x7f0000000040)="b60aea8a64cfeff6878da7ecbe6907ddec4f9ff02277377e4c17ac5de6f1952d5cbe4b9d0989f362ee87f751cd090914e265106957d79f4dc7e839e8d2937d491e8e503b0c1a932c2dc88fad5143b420fb6f861f887d478c473e225cdc0bdcd9b0ca38636565bebecd0f85065f84306b33e490446757e52f1a464be8a972b9a8c412e4eb1158ef5fbfba13a3d9bf66f53ef150dc13cebfe6e217ad3f8f48701d6fcb8ba7ce9d76ae69f0e9dd31aaab9af009176a2a5cbcc33bf76eb7ee53278f3b27369b184d10f75eea", 0xca, 0x8, 0x0, 0x3}, &(0x7f0000000180)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}}], 0x2, 0x0) 22:51:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r9) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r9) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0x9e263) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r10, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000400000008000a00", @ANYRES32=r10], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9aebc12b", @ANYRES32=r10, @ANYBLOB="00000002000000001c0012000c00010062726964676500000c0002000800190008"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) [ 927.387639][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 927.406896][ T2911] device bridge3 entered promiscuous mode [ 927.446430][ T2914] device bridge_slave_0 left promiscuous mode [ 927.453912][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state 22:51:18 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffdffffff, 0x100012, 0xffffffffffffffff, 0x0) tkill(r0, 0xe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000000180)) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0xd8a}, {0x5, 0x9}]}, 0x18, 0x3) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000080)=""/58, &(0x7f0000000100)=0x3a) [ 927.496893][ T2914] bridge3: port 1(bridge_slave_0) entered blocking state [ 927.504302][ T2914] bridge3: port 1(bridge_slave_0) entered disabled state [ 927.513905][ T2914] device bridge_slave_0 entered promiscuous mode [ 927.526925][ T2914] bridge3: port 1(bridge_slave_0) entered blocking state [ 927.534238][ T2914] bridge3: port 1(bridge_slave_0) entered forwarding state [ 927.554641][ T2911] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 927.573123][ T2911] bridge3: port 1(bridge_slave_0) entered disabled state [ 927.581159][ T2911] device bridge3 left promiscuous mode [ 927.649600][T14314] tipc: TX() has been purged, node left! [ 927.834691][ T2918] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 927.844642][ T2918] bridge3: port 1(bridge_slave_0) entered blocking state [ 927.851846][ T2918] bridge3: port 1(bridge_slave_0) entered forwarding state [ 927.860067][ T2918] device bridge3 entered promiscuous mode 22:51:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000024c0)="2e00000019008102e00f80ecdb4cb9020a00000000800000810040eb120418000000ca1b40d719a9060005000007", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$kcm(r3, &(0x7f000001a680)={&(0x7f000001a0c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f000001a540)=[{&(0x7f000001a140)=""/153, 0x99}, {&(0x7f000001a200)=""/77, 0x4d}, {&(0x7f000001a280)=""/124, 0x7c}, {&(0x7f000001a300)=""/79, 0x4f}, {&(0x7f00000016c0)=""/252, 0xfc}, {&(0x7f000001a480)=""/147, 0x93}], 0x6, &(0x7f000001a5c0)=""/173, 0xad}, 0x10000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r6) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xc0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, &(0x7f0000000340)={0x8, 0x2}, 0x0, 0x0, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x1000003}, &(0x7f0000000900)=0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x1, 0xb4}, 0x10, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f000001a740)={0x1d, 0xa, &(0x7f00000017c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7f, 0xffc, &(0x7f0000000600)=""/4092, 0x41000, 0x5, [], r4, 0x18, r5, 0x8, &(0x7f000001a6c0)={0x2, 0x1002}, 0x8, 0x10, &(0x7f000001a700)={0x2, 0x2, 0x9, 0x5}, 0x10, r7, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111980000000000040000000000000e9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, r7, r2}, 0x78) 22:51:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000100)={{r2, r3+10000000}, {0x0, 0x3938700}}, &(0x7f0000000140)) poll(0x0, 0x0, 0x204) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000000240), 0x2305e2b7) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r4, &(0x7f0000000240), 0x2305e2b7) [ 928.260252][ T2926] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'. 22:51:19 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x2c, 0x1, @thr={&(0x7f0000000240)="cda7fe31f7ca606c5b6e08895b7712a6cf000de88e901ac39ff668b2e08ed7511926ab5d2f39960d9466b4ab4784a614f95b396fbecafd991c4ff1e9d89b7eb45db95e20db8bc028066d0c4a71ac83fec33aac3baa3634677fc789a494eb6e63956146d4f6c4014342c9ac3e948b8c697d9661359a5961f54e8645a0", &(0x7f00000012c0)="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"}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = syz_open_pts(0xffffffffffffffff, 0x444600) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x707981, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000300)={0x20000000, 0x5, 0x0, 0x0, 0x10001}) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000340)=""/86, &(0x7f00000003c0)=""/255, &(0x7f00000004c0)=""/178, 0xf000}) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) tkill(r0, 0x3a) [ 928.344847][ T2928] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'. 22:51:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 22:51:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:51:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000200)='./file0\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x8140, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d002, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)="ef", 0x1, 0x80000}]) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)) [ 929.025140][ T32] audit: type=1800 audit(1593989479.882:30): pid=2955 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15705 res=0 22:51:20 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) geteuid() clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}, &(0x7f00000000c0)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xc) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x3b, 0x1, @tid=r3}, &(0x7f0000000100)=0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x0, 0x9}}, 0x0) getpid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 929.236542][ T32] audit: type=1800 audit(1593989480.092:31): pid=2959 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15760 res=0 22:51:20 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d400000010003b0e80ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000050000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e0000000060011004e24000005001600020000000500170000000000050008000000000008000600ac"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x7, 0x7f, 0x6, 0x0, 0x392, 0x200, 0xada51eb9181ef0ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x9cdb}, 0x640, 0x0, 0x80000000, 0x5, 0xe3d, 0x1, 0x3}, r1, 0x6, r3, 0x8) 22:51:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x1, 0x0) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000840)='/dev/null\x00', 0x494140, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES16=r6, @ANYRESOCT=r5], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}]}, 0x188}, 0x1, 0x0, 0x0, 0x880}, 0x40080) r7 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4188aea7, 0x0) dup2(r9, r8) [ 929.589804][ T2966] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. 22:51:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read(r1, &(0x7f0000000040)=""/117, 0x75) r6 = accept$alg(r0, 0x0, 0x0) sendfile(r6, r1, 0x0, 0x100000000a3d) 22:51:21 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x12) r1 = socket$inet(0x2, 0xaa3053c360514152, 0xfffffbff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x4, 0xc000000000000}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) utime(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)={0x800, 0x1}) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendfile(r6, r5, 0x0, 0x8000fffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x3) 22:51:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r4}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r5, 0x54c9f000) [ 930.403426][T14314] tipc: TX() has been purged, node left! [ 930.486588][ T3002] usb usb9: usbfs: process 3002 (syz-executor.5) did not claim interface 0 before use 22:51:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x20, 0x4e20, 0x1000, 0xa, 0x0, 0x0, 0x29, r4, r5}, {0xfffffffffffffff9, 0x4, 0x9, 0x40, 0x4, 0x7, 0x1f, 0x6}, {0x6b6a, 0x4, 0x9, 0x9}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x2, 0x0, 0x9, 0x392, 0x4f, 0xffffffff}}, 0xe8) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) [ 930.626421][ T3002] usb usb9: usbfs: process 3002 (syz-executor.5) did not claim interface 0 before use 22:51:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'veth0_virt_wifi\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0xa0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x7}, ["", ""]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r5}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c880}, 0x0) close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getgroups(0x1, &(0x7f0000000100)=[r7]) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 931.107014][ T3025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 931.164512][ T3026] usb usb9: usbfs: process 3026 (syz-executor.5) did not claim interface 0 before use [ 931.221184][ T3026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:51:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x208020, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7fff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x98d, 0x0}) [ 931.633791][ T3038] usb usb9: usbfs: process 3038 (syz-executor.5) did not claim interface 0 before use [ 931.643916][ T3038] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0000 i0000 l0 22:51:22 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x6000000000010, 0x80000, 0x6) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000001c0)={0x3, "5655e3"}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2602, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000180)='syz1\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000000000050000000000ffde0000000000fc523a87fa840c14bc8fa3701e4d0300062f154857eacf8d5f88e8d46131e49fe742dea39e33c7aa93e51c0f15f7e6cfb567e31e9ca854c8219587f549", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006c6f0000e4ffffffffffffff0000000018003480"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) [ 931.885740][ T3050] Unknown ioctl 1074287980 [ 931.918478][ T3053] Unknown ioctl 1074287980 22:51:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x18, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r3, 0x5}, &(0x7f0000000100)=0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x68001) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0xa1, 0x1a, 0x0, 0x0, 0xffffffffffffff01, 0x0, 0x0}) 22:51:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'syz_tun\x00', 0x3}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x40, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) 22:51:23 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101480) 22:51:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000008000073, 0x28c03) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f00000000c0)=0x7f, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xf23d57888f90cda1}, 0x880) 22:51:23 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1f0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1b8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14}}, 0x264}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000507000000000000000072030000", @ANYRES32=0x0, @ANYBLOB="00010000000000002c0012000c000100626f6e64000000001c00020008000100040100000a001a007f000001"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000100)=0x7fff) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000000c0)) [ 932.791390][ T3076] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 932.800582][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 932.882074][ T3076] device bond7 entered promiscuous mode 22:51:23 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="c60c0008"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x802, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x0, 0x0) semtimedop(r6, &(0x7f0000000040), 0x1b9, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) [ 933.080262][ T3076] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 933.092369][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 22:51:24 executing program 5: mbind(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x1, &(0x7f0000000080)=0xf5, 0x4, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7ffffffe, 0x40, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 933.211039][ T3128] usb usb9: usbfs: process 3128 (syz-executor.5) did not claim interface 0 before use [ 933.325963][ T3076] device bond8 entered promiscuous mode 22:51:24 executing program 3: syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/376], 0x0) 22:51:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000432408e623a2fb914371e9db5600", @ANYRES16=r1, @ANYBLOB="b5219e774600000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000400ac1414bb08000600ac1414aa08000600a9fe15bb08000700ac1414aa080007000000000008000700ac1e010108000a000100080008000300ab00000018000e0003"], 0x90}}, 0x0) 22:51:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68081) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) signalfd4(r4, &(0x7f0000000140)={[0x6]}, 0x8, 0x80800) [ 933.677129][ T3173] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 933.715339][ T3175] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. 22:51:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000fffffffff2ff00000900010063616b6500000000180002000c000200070000000000004b"], 0x48}}, 0x0) [ 933.828428][ T3177] usb usb9: usbfs: process 3177 (syz-executor.5) did not claim interface 0 before use [ 933.895918][ T3184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:51:24 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x80c002000104082, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="71f10000f8650bac7a22abffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000080)={r4}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x401}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r5, 0x1, 0x10, 0x1}, &(0x7f00000001c0)=0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mlock(&(0x7f0000a60000/0x4000)=nil, 0x4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) getpid() fadvise64(r6, 0x0, 0x0, 0x4) 22:51:24 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64], 0x6c}}, 0x4001) getdents(r1, &(0x7f00000000c0)=""/89, 0x59) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r8) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r8) write$binfmt_misc(r8, &(0x7f0000000040)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10105, 0x0) 22:51:25 executing program 3: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timerfd_create(0x3, 0x1000) r1 = gettid() clone(0x440e2400, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x111, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) ptrace(0x10, r1) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x186, 0x12, &(0x7f0000000000)="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"}) wait4(0x0, 0x0, 0x0, 0x0) 22:51:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 22:51:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) dup(0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)=0x9) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000080)=0x9) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000480)={{0x2, 0x0, 0x3f, 0x1, '\x00', 0x4}, 0x0, [0x7b33, 0x4ef, 0x4, 0x9, 0x8, 0x9, 0x5, 0xd8, 0x10000, 0x80000001, 0x7, 0x21, 0x3f, 0x9, 0xfffffffffffffff8, 0x5, 0xffffffffffff8001, 0x200, 0x7, 0x800, 0x5, 0x8, 0x2, 0x3, 0x5, 0x40, 0x8, 0x4, 0x8, 0x971, 0x9, 0x0, 0x9, 0x3, 0x2, 0x8, 0x100000000, 0x20, 0x2, 0x9, 0x9, 0x2, 0x6, 0x1b66, 0x6, 0x6, 0x800, 0x7ff, 0x1f, 0x81, 0x1ff, 0x7, 0x4f1, 0x3, 0x1f, 0x7, 0x8, 0x200, 0x7, 0x1, 0x8, 0x0, 0x7f, 0x7, 0x34, 0xffff, 0x10000, 0x4c, 0xff, 0x8001, 0x80000001, 0xa80f, 0x2, 0x3, 0x0, 0x8, 0x54a, 0x28, 0x3, 0x7a, 0x9, 0x11f, 0x1000, 0x1164, 0x1f, 0x3800000000000, 0x8, 0x0, 0xffffffffffffffc0, 0x101, 0x100000000, 0x6, 0xfffffffffffffeff, 0xa3b, 0x9, 0x0, 0x4, 0x8, 0x9, 0xfac7, 0x9, 0x5, 0xc1, 0xffffffffffffffff, 0x400, 0x9, 0x4, 0x1862, 0xfff, 0x1, 0xc3, 0x3ff, 0x2a, 0x20, 0x100000001, 0x10000, 0x0, 0x3, 0x401, 0x8, 0x5a2, 0x5, 0xffffffff, 0x3d4d, 0x3f, 0x5, 0x51c8, 0x6]}) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x8, 0x800002) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000001800)=""/56, 0x38) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad24180648c6394fb0124fc0012000b400c000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0) [ 934.337270][ T3202] IPVS: ftp: loaded support on port[0] = 21 [ 934.401121][ T3205] usb usb9: usbfs: process 3205 (syz-executor.5) did not claim interface 0 before use [ 934.466711][ T3208] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 934.484899][ T3208] device 0 entered promiscuous mode [ 934.652376][ T3205] usb usb9: usbfs: process 3205 (syz-executor.5) did not claim interface 0 before use [ 934.710477][ T3242] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 934.752533][ T3203] IPVS: ftp: loaded support on port[0] = 21 [ 934.758302][ T3242] device 1 entered promiscuous mode 22:51:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:51:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x25, &(0x7f0000000140)="d3d763180dee636b7be929f7f249b9740c9e57f43d26af000000008a58480aa4cefdda3611"}}], 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x7) [ 935.099581][ T3277] usb usb9: usbfs: process 3277 (syz-executor.5) did not claim interface 0 before use 22:51:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100e4ff000800000000000000c59e3acadcdaff2e32eeee423fb59d8a91fe9522fccf2facffcbe66d85f8361378fdbea6f2f05ea56e69e07a17937eeaef"]) 22:51:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) prctl$PR_SVE_SET_VL(0x32, 0x1fb57) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) fsetxattr$security_evm(r2, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@v2={0x5, 0x2, 0x1, 0x7, 0x20, "aabd4a8564b77fffddae211e782382d370a16ff96c59cebd7bd98fcc3227978b"}, 0x29, 0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r4) getsockname$unix(r4, &(0x7f0000000080), &(0x7f0000000100)=0x6e) [ 935.460738][ T3291] usb usb9: usbfs: process 3291 (syz-executor.5) did not claim interface 0 before use 22:51:26 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, {0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, [], 0x1}}, 0x5, [0x8000, 0x0, 0xffffff01, 0x8, 0x5, 0x3, 0x3, 0x8]}, 0x5c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x810) [ 935.574421][ T3296] usb usb9: usbfs: process 3296 (syz-executor.5) did not claim interface 0 before use [ 935.746303][ T3311] device xfrm1 entered promiscuous mode 22:51:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x3}], 0x1, 0x0, 0x0) bind$isdn_base(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000100)=""/175, &(0x7f0000000080)=0xaf) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = gettid() timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000001c0), &(0x7f0000000240)) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0xc) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)) 22:51:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffbffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40045108, &(0x7f0000000000)={{0x0, 0x64}}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0xffffffffffffff5b, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0x4ac}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0xe1, 0xfff, 0x1b8f, 0x200}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ad, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000001c0)=""/64) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf9b3}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 22:51:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x18, &(0x7f00000001c0)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)={r5, 0x9, 0x56, "b5d323d6dbeaf99099243db0abce4ff0986e5be214f82469851e5f3e1fd7c893fd2d8f5d5c82f20e4522a4a0c64469e69eed72192a78858c82777cb846bfdabaf16a70184e367f226d54fd3fcaa73c62fada4f7ea80c"}, 0x5e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r9, 0x4008ae89, &(0x7f0000000080)={0x7e, 0x0, [0x80c0000080], [0xc1]}) 22:51:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100), 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000008}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r10, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) socket$netlink(0x10, 0x3, 0x8) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000380)="96e41772b9ac0e4f3f2606d6c5b0bb332ef511ee0662adc5dcd174a3556bc5f2fed41e31cfac02fd12e664a18a70589b07a4851645c460f858715501a7ea7620723d9122410887ac6dae341e06584be98c256caf736ee147538f35d8faa99c99c6185346f2a9f30809af3634a03847b7f998a46e6a4559037dea0dbc3801be75def316b17350cfce872078a92afa897d87d6b9877282294436895408e4ceb51889c123ef0f5a82feaf0f156febcf021c519c503cbb3b0d3fe06bdc42ecf3c0d900c3963cbda0bcf035a747d398819fbdcc232009ac88b9465b790c5d739b164bdcfe7f7b367cd2", 0xe7}, {&(0x7f0000000000)="3c55df8bb911288694faae4e7832be17", 0x10}, {&(0x7f0000000500)="9b536acd1cecaae26c543dae7e0d99caf71e96c9f910df35d144873f3d924cddd3d32588e497996421d5fe01ee60201a7bdda9aa1f6f47431735814de6dcc336d39d74def55ca9ff403e3d130c52644b82949e7f2aa5d2869596de6140d20bf9f151db83b062", 0x66}, {&(0x7f00000002c0)="bed2e0c2eb18edf3cd051ee5789266c9718706373f9391232b55fd1b3d4435aeae3fa26b5d27e7b1874bf85670cef7332a89bff19190f7607aaceadcd4f95119be", 0x41}, {&(0x7f0000000040)="d8d2b1f18cadef557b5f9d3d77e6004c", 0x10}], 0x1000003f) 22:51:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff69}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/137) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) 22:51:28 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000180)) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)='//{\'\x00', r1}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x20, r1}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:51:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r6) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={{r3}, 0x3, 0xffffffffffffff56, 0x1}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ldconfig_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x90}, 0x1, 0x0, 0x0, 0x24048010}, 0x1000d) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_acl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x884) 22:51:28 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="000000fbff000000280012800a00010076786c616e00000018000280140016"], 0x3}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES16], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 937.417755][ T3351] usb usb9: usbfs: process 3351 (syz-executor.5) did not claim interface 0 before use [ 937.448656][T14314] tipc: TX() has been purged, node left! 22:51:29 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000980)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000001c0)=[0x1, 0x8], 0x2}) 22:51:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:51:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x5d80fa70d590694e, 0x3, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0915, 0x94a, [], @p_u16=&(0x7f0000000080)=0x5}}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000140)={0x9, 0xff}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) [ 938.273249][ C0] sd 0:0:1:0: [sg0] tag#4326 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 938.283983][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB: Test Unit Ready [ 938.290875][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.306698][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.316570][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.327107][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.337673][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.347578][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.357733][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.367762][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.378418][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.390463][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.401687][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.418449][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.428331][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:29 executing program 1: set_mempolicy(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x4010, r1, 0x10000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0xf4, 0x3231564e, 0x3, @stepwise={0x7f, 0x2, 0x4, 0x2, 0x6, 0xccf0}}) 22:51:29 executing program 2: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x11444cb, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3a0, 0xd0, 0xd0, 0x0, 0x1f8, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@ipv6={@mcast1, @mcast1, [], [], 'dummy0\x00', 'vcan0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth1_macvtap\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x200, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbf8, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="8800010000", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000314000280080002009d01000008000200060000000000000000000000000000000000e413349768af442c6accff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x78, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x78}}, 0x0) [ 938.861323][ T3403] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT [ 938.872854][ T3404] IPVS: ftp: loaded support on port[0] = 21 [ 938.895694][ T3405] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 938.961974][ T3405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 938.987539][ T3403] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 939.004033][ T3403] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 939.087012][ C0] sd 0:0:1:0: [sg0] tag#4328 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 939.103649][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB: Test Unit Ready [ 939.110270][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.120219][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.130408][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.141512][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.152250][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.162114][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.171983][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.181851][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.191725][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.201603][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.211469][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.221309][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 939.231432][ C0] sd 0:0:1:0: [sg0] tag#4328 CDB[c0]: 00 00 00 00 00 00 00 00 [ 939.483237][ T3450] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:51:30 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x30, 0x80040) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x922b, 0xfffffffffffffffd, 0x9}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0x401) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="f8ffffffffffffff14001280090001007663616e010000be53383c8008000400100c069b14a89ecc84f39c6f8cfe30d05748878c14af3ab51135b97422c66b51ab6d92547bb423512198233c00afa28eb4142fed99bb02935527f73c3458e6b793", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) [ 939.608365][ T3406] IPVS: ftp: loaded support on port[0] = 21 22:51:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 939.818758][ T3503] usb usb9: usbfs: process 3503 (syz-executor.5) did not claim interface 0 before use [ 939.838152][ T3505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 939.886759][ T3509] usb usb9: usbfs: process 3509 (syz-executor.5) did not claim interface 0 before use [ 940.006600][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:51:31 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2078664915b91cd800000615", @ANYRES32=0x0, @ANYBLOB="08000100ac1414de"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @reserved}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}, 0x1, 0x0, 0x0, 0x20064815}, 0x0) close(r1) 22:51:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x1}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = semget(0x0, 0x0, 0x41) semctl$IPC_INFO(r7, 0x1, 0x3, &(0x7f0000000040)=""/217) semctl$GETVAL(r7, 0x0, 0xc, &(0x7f0000000580)=""/4096) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r4, &(0x7f0000000000)="240000001a005f3814f9f4070009040180000000000000000000000008001e0040000000", 0x24) [ 940.372407][ C1] sd 0:0:1:0: [sg0] tag#4330 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 940.383236][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB: Test Unit Ready [ 940.389879][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.399761][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.409716][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.419716][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.431238][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.441163][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.451464][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.461818][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.473819][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.483988][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.495084][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.505690][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 940.515562][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x4e0000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000180)={0x7, 'hsr0\x00', {0x200000}, 0x6}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/69) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = msgget$private(0x0, 0x90) msgsnd(r4, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0xc9615879b1a349d6) msgctl$IPC_RMID(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r5) write$FUSE_LSEEK(r5, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x3, {0x4}}, 0x18) 22:51:31 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x8000, &(0x7f0000000100)=[r3, r4]}, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) 22:51:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"/683], 0x80}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) getpeername(r1, &(0x7f0000000280)=@caif=@dbg, &(0x7f00000000c0)=0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x1c46819250e93059) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200002ddb11274e03f2bc0105000600200000000a000000000000000005dde400e6060000001fe531020000000300000000000002000100f5000000000000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000282, 0x0) [ 941.373692][T14314] tipc: TX() has been purged, node left! 22:51:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x9, 0x5, 0xa}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x11, 0x0) 22:51:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4f}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@remote, @broadcast, 0x0}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80840a03}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x70}}, 0x40) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '%'}, {0x20, '$![&+\\+!#&-$/['}, {0x20, '*'}, {0x20, '/dev/net/tun\x00'}, {0x20, '$**-\xda}\xa0-\xed\\!\xd2:[\')'}], 0xa, "598a74c349c867af398b8912047b020b101926eaf15894058bf679a216e9e51d3e0ad93431c43e0a1ed734cb6813a1c99c62b966c441bf0837930d57d79ca041f7e82e81ac3689f2bff57fd9296e7f351fb313665de4"}, 0x93) [ 941.676956][ T3591] usb usb9: usbfs: process 3591 (syz-executor.5) did not claim interface 0 before use [ 941.857073][ T3591] usb usb9: usbfs: process 3591 (syz-executor.5) did not claim interface 0 before use 22:51:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="880e00002c00270d000000000000002000000000", @ANYRES32=r6, @ANYBLOB="00000000000000000a000000090001007273767000000000580e0200540e0600500e01000a0001007065646974000000240e0280200e0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0xe88}}, 0x0) [ 942.261407][ T3617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:51:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x802200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000f45f3ce5040f0000000000000000050000090900020073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r3) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000040)) semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f0000000280)=""/147) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xe, 0x12, r5, 0x0) ioctl(r4, 0x40044103, &(0x7f0000000040)) 22:51:33 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9207ac3d78578fcd292a8fcd277cb57f5650731dbaf12ea772d0000000000000003d6c1610c621c85fe3e3485460af173b9bede5105e65b5328de821ef57e8d4306f47f6ea4a656379adf275ca89b94b83f221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac82feaa718c023043d03a6fb4862e0353a7efd2f2d23d90b8411f1b34ce144800897c857c2272248f0604b910806046113d82e6257074807ee943994f587eb64d28c7eb86249403f04ffa8265c76eb17877fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04abe73456e9b828ae419b20f2e7cb670020000000000000000000066e9239a4e344cded8df72bc1b9ab22018000000000000003e1b98da06c1f545bafb01ffa71e6e3888e1abb1436f84c61f937487f1446c76af68b1242547fd0e93baea5da870099a43c5e138cdf9adedd4883674f22ebf9b6f25f27680a977f24040094d32ce2e7c31e37e9f4d5b37d0c6876011b3492ba3619088e459ed8572669d96bd411eb260000003b5a3f96d22ed91c00d715b359610b8021d9a4ce23e89273704cb8e0afe3c87dadd39bda4a43e866f2f161427cdbaff0f7382c9417bd73f92198235f9b214db6e4682d9d1e76cc5d2de30c3a8a33a94f2c9a1e673ab05e99b0fc125854c94dd24d10151c06efe97d5b126566289df476b04dcb5eece75a7cec62efa1f18ed29f4899890e2f71575add5c382f528cd964f536c628ba0a4a82211bf0198bdf53d6b8c0fe8ae40722ac6b3558ff607535c0641d149ec16de347899696c13c778ac424f34b91b7531bb9cfb4277e20fbc6fb17ec735f9fa3d52cee66ddf79a83b901dbb5831fb8c9942c8a84034ca24a7cfa5bd55558dab5af49d6e2aa00ad262a5377a24c4bfb0c88f500e65377e85b28611dd415b9853d3b48283d289c3bb01bb92a5d2537a14fc31b1108e00000000000000000d89b8530d755b8522e3f33fc715059d4426529677f8101b18bbf986c6a92af1a9f6e9876ee54ab05b4392e529d9763f6f38893d839a022beb1fd19c6acd12f7a04ea7a9258365c144699030f958a8b9625e54937f72af9f7286f35cb5639a5ea99de1d77a9d0ad4780ef2259ce90ad44329400"/840], 0x18}}, 0x0) close(r1) 22:51:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x6001}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @remote, @ipv4={[], [], @loopback}, @broadcast, @ipv4={[], [], @multicast2}}}, 0x38) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="d7a1ee5bf828a7037a0bfef54ce2c9de", 0x10) 22:51:33 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) r4 = dup2(r2, r3) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xf0, 0x464, 0x4, 0x70bd26, 0x25dfdbfc, "acb626c5ae79d61efd4f76eef04d20085dffecb6d6383b43625f39e87022b594202e44fcf995f422917fdf62dda930b8fd7c3dd464eda4b57fa2984d2e75035cb0177d47c32391db56b1208ac72d64d393aa57b6af767a38aea11b47981df4272ebea33bb4de6afe84cfbca2eb01551f54f43e8b1095b73f264eaa837f61847654f9fa094498d7dd006822cc0d254426deefdefaeb34f26e3358a271b3705c785c07a79c588282fb89f3224eaabd6dafc72730f3346b81d9394f3383593feb51aaf9e555606a8e217be4067c314f3f160ae9c7db88ce994196659c8f39151213", [""]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = dup3(r6, r5, 0x0) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x0, 0x3, 0x4}}, 0x2e) mmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0xfffffffffefffff9, 0x20002e013, 0xffffffffffffffff, 0xf83c1000) tkill(r0, 0x1000000000016) 22:51:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}, 0x45c) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000180)="a21603e42f88826ebfa7b624bc", 0xd, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r3) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcbc718b}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x4) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='{\'\xc8,^@:$@.}\x00', r4) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfff80000, 0x0, 0x0, 0x4, 0x4000], [0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6de, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x80000000], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d3f]}, 0x45c) 22:51:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000240)=""/111, &(0x7f0000000000)=0x6f) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000537287bb000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x18, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x7, 0x200, 0x0, 0x1000, r6}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={r7, 0x70, "2a8d49d35782a13e13484b3919d6cb7d77d99a2e913016010f36e8e6179cc756a9642e153e55bbd6f4e872a3e6451695b91e0d67252c1e1ffb0b834e164099eba53c4c8a6bbc9705c546f4c25467804f0715b3e94345e3e452482f8b12acf61e738840f5fc7993f0923f3a779e6626bf"}, &(0x7f0000000440)=0x78) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000140)={0x8b3, 0x4, 0x0, 0xb9e6, 0x800, 0x7fff}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U+', 0x1ff}, 0x16, 0x1) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r8}}}], 0x28}}], 0x2, 0x0) [ 942.794044][ T3631] usb usb9: usbfs: process 3631 (syz-executor.5) did not claim interface 0 before use [ 942.812318][ C1] sd 0:0:1:0: [sg0] tag#4331 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 942.823264][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB: Test Unit Ready [ 942.829888][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.840811][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.850707][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.861134][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.871007][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.880886][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.890794][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.900675][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.910551][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.920419][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.930904][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.941210][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 942.951067][ C1] sd 0:0:1:0: [sg0] tag#4331 CDB[c0]: 00 00 00 00 00 00 00 00 [ 942.984969][ T3639] input: syz1 as /devices/virtual/input/input20 [ 943.209189][ T3650] input: syz1 as /devices/virtual/input/input21 [ 943.406060][ T3631] usb usb9: usbfs: process 3631 (syz-executor.5) did not claim interface 0 before use [ 943.586420][ C1] sd 0:0:1:0: [sg0] tag#4335 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 943.597121][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB: Test Unit Ready [ 943.603861][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.613750][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.623640][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.633527][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.643426][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.653392][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.663437][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.673328][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.683752][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.693645][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.704468][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.714443][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 943.724423][ C1] sd 0:0:1:0: [sg0] tag#4335 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:34 executing program 2: r0 = getpid() r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520610000000000001000fff600"], 0x14f) r2 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0xfffffc00, 0x4) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0xaa57, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000140)=0x73, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') sendto$inet(r3, 0x0, 0x0, 0x3000c7e9, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r3, &(0x7f0000000300)="02", 0xc3f2, 0x11, 0x0, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f00000003c0)={[], 0x0, 0x9, 0x5, 0x0, 0x7f, 0x1, 0x4000, [], 0x7}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) 22:51:34 executing program 1: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000200)) chmod(0x0, 0x4d) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x800, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) write$binfmt_misc(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x9, 0x2}, {0x3, 0x401}], r6}, 0x18, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=0x0], 0xe4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffff) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) splice(r2, &(0x7f0000000180)=0x8000, r3, &(0x7f00000001c0)=0xffffffffffffff01, 0x8001, 0x4) [ 944.128435][ C0] sd 0:0:1:0: [sg0] tag#4336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 944.139169][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB: Test Unit Ready [ 944.147832][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.160570][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.170573][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.180698][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.190666][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.200795][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.214600][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.225634][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.235604][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.246215][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.256586][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.266501][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.276461][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[c0]: 00 00 00 00 00 00 00 00 [ 944.418835][ T3709] IPVS: ftp: loaded support on port[0] = 21 [ 944.716475][ C0] sd 0:0:1:0: [sg0] tag#4340 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 944.727323][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB: Test Unit Ready [ 944.734094][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.744000][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.753905][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.764106][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.773959][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.783903][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.793795][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.803915][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:35 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x26, "0880854724ac14f1dfd0466f7511458816c31ad11be951b71e1454256f55f1a3b2e1f08e1dd5"}, &(0x7f00000001c0)=0x2e) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000000c0)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) 22:51:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x404000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r9, 0x42b, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x101, @mcast1, 0xf3b}, r3}}, 0x30) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 944.813768][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.823612][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.836686][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.846542][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.856455][ C0] sd 0:0:1:0: [sg0] tag#4340 CDB[c0]: 00 00 00 00 00 00 00 00 [ 944.912848][ T3706] debugfs: Directory '3706-6' with parent 'kvm' already present! [ 944.929164][ C1] sd 0:0:1:0: [sg0] tag#4341 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 944.939832][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB: Test Unit Ready [ 944.947095][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.956879][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.966772][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.976787][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 944.986686][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.001271][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.011539][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.021864][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.031845][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.043655][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.047637][ T3709] IPVS: ftp: loaded support on port[0] = 21 [ 945.054421][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.070095][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.079956][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[c0]: 00 00 00 00 00 00 00 00 [ 945.373422][ T3757] usb usb9: usbfs: process 3757 (syz-executor.5) did not claim interface 0 before use 22:51:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = socket(0x400000010, 0x802, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400608ce37411ecc8fcb27c142becac293a6b5a336ac5d10dbf00009615fac86e377d0c3b93c998df89fb4bca746c09d3873f0686938d6ef8eb4902add65312aed4d064a838f01c45745ff29330da492eafaf71ca6a320e446618b500dd5a66106d0432d51c4433cd499cf4253d99cddf8354d698fc82f552e2286388d60b90eaad76d184a869933ac59d2cac990946f89d8a1f77d3fb461a34b9b13d635b939035184d9cd98a7c4c62cab96735b33ed1b32b23d060141015c93b1e5a6137ee9de98e77c5d97c7ea86d7a6f51ae06f2aebde6f1e8b5287025352ddeb8befc945597a811e8b6", @ANYRES16=r4, @ANYBLOB="000826bd7000fddbdf250800000008000c000300000008000c000000000014000500fe8000000000000000000000000000aa06000b0027000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c011}, 0x24000040) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3b}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000810}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '{*\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '#]&\x99\\]-\'\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40040000) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r6+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r5, 0x1000000000016) 22:51:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0xe00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x35}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x810) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x2, "e30060"}, "ccbfc12abc282c27820fd9118600820e000600110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) [ 945.686164][ C0] sd 0:0:1:0: [sg0] tag#4342 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 945.698021][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB: Test Unit Ready [ 945.705093][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.715197][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.725779][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.735857][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.745857][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.755778][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.766565][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.776617][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.786744][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.796644][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.806550][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.816426][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 945.827787][ C0] sd 0:0:1:0: [sg0] tag#4342 CDB[c0]: 00 00 00 00 00 00 00 00 [ 945.933185][T14314] tipc: TX() has been purged, node left! 22:51:37 executing program 3: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) 22:51:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) personality(0x800000) 22:51:37 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"/1050], 0x18}}, 0x0) close(r1) [ 947.060987][ C0] sd 0:0:1:0: [sg0] tag#4343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 947.071775][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB: Test Unit Ready [ 947.078712][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.088653][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.099222][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.109234][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.119211][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.129236][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.139154][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.151525][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.159011][ C1] sd 0:0:1:0: [sg0] tag#4344 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 947.162789][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.173072][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB: Test Unit Ready [ 947.173184][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.182805][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.189361][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.199040][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.208739][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.218392][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.228062][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.238172][ C0] sd 0:0:1:0: [sg0] tag#4343 CDB[c0]: 00 00 00 00 00 00 00 00 [ 947.247847][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.274881][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.284689][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.294511][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.304326][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.314829][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.324638][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.334451][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 947.344261][ C1] sd 0:0:1:0: [sg0] tag#4344 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:38 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) 22:51:38 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) 22:51:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x72003) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x8, 0x0, 0x4, 0x800, 0xffffffff, {0x0, 0x2710}, {0x4, 0x2, 0x80, 0x1, 0xa5, 0x40, "14d7a5a0"}, 0x40, 0x1, @fd, 0x4, 0x0, r7}) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000180)=0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x18, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, [], 0x1}, 0x80000000}}, 0x4, 0x8, 0x4372, 0x6, 0x40}, &(0x7f0000000040)=0x98) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 948.059540][ C0] sd 0:0:1:0: [sg0] tag#4346 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 948.070215][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB: Test Unit Ready [ 948.077006][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.087147][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.097050][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.107060][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.116936][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.126795][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.137073][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.147737][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.158942][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.168826][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.178692][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.188533][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.198656][ C0] sd 0:0:1:0: [sg0] tag#4346 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:39 executing program 2: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x26, "0880854724ac14f1dfd0466f7511458816c31ad11be951b71e1454256f55f1a3b2e1f08e1dd5"}, &(0x7f00000001c0)=0x2e) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000000c0)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 948.522581][ C1] sd 0:0:1:0: [sg0] tag#4347 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 948.534828][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB: Test Unit Ready [ 948.541451][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.551340][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.562282][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.572175][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.582025][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.591904][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.601780][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.611809][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.621709][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.631691][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.641841][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.651823][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 948.661836][ C1] sd 0:0:1:0: [sg0] tag#4347 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:41 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000c34010400008000000000040004800900020073797a30000000000900010073797a3000000000080003400000000022000200b7398b598aea91647e8fa5636312c4117379030f5f80"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @identifier="f3638bb3b84d0b4f73474bd284d7d168"}}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 22:51:41 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000080)=0x1, 0x4) tkill(r0, 0x1000000000016) 22:51:41 executing program 3: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="952ffc5cc6ed140a77a4ebdc9f09f0567dbf3d6c9856ec0a9b4d342e1b630ac413c2ffffffffffffffffcca6eda27407b750f47fe886d49d1234d96662abde244c5df0fd57b58e0878744bc4b628833ac3a6e4470c3c42ca5e4001a231d8668d2b1f37e9ee57d20df7dc8c908c7d7164fe80a19faae67a33826f5aca145d9af6fd7162a1616259bf0d924a7a45928520d413a542c0931262910c059b0dc900b399ec6c84387a775c02bffd3d00b3d0b33b3c592027cac9804ebb5a3038"]) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000001c0)={r3, &(0x7f0000000500)=""/4096}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) ioctl$RTC_VL_CLR(r6, 0x7014) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x0) 22:51:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) close(r1) 22:51:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 950.455414][ C1] sd 0:0:1:0: [sg0] tag#4348 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 950.456463][ T3979] usb usb9: usbfs: process 3979 (syz-executor.5) did not claim interface 0 before use [ 950.466130][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB: Test Unit Ready [ 950.466228][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.492226][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.502704][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.512583][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.522604][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.532901][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.542787][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.552759][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.562663][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.572547][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.582525][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.593168][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 950.602905][ C1] sd 0:0:1:0: [sg0] tag#4348 CDB[c0]: 00 00 00 00 00 00 00 00 [ 950.638376][T14314] tipc: TX() has been purged, node left! [ 950.711904][ T3987] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 950.750330][ T4001] usb usb9: usbfs: process 4001 (syz-executor.5) did not claim interface 0 before use [ 950.849232][ T3987] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 22:51:41 executing program 0: r0 = gettid() timer_create(0xd6bbd93caadfa05b, &(0x7f0000044000)={0x0, 0x8, 0x0, @thr={&(0x7f0000000080)="083ebb8a31edfd34f32f740809f6a50206cadbad0bcd78d8e01782e345adf9ea431a7f5d8114b317d318eac1aba2", &(0x7f0000000180)="a9369f36b5f4decad00e19faec3132260833d3bbbe4b8bdf1405d579ea0ebcc772323fcfd37ada117e38f4ef6a0a14b2c503ef631a1325cac7687c0f10a6d88b63402db1b7d83eeb92c1abd1b461faec7e43bd5ab928161fcbe97c5aeca8e38b673ebd10b287497fc142a46635c3b3e6a4f1efd050c9bde6c775c0e46c3621"}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 951.036276][ T4025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 951.096779][ C0] sd 0:0:1:0: [sg0] tag#4349 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 951.108398][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB: Test Unit Ready [ 951.115165][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.125082][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.135758][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.145831][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.155704][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.166511][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.176474][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.186333][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.196200][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.206062][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.215914][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.225830][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.236636][ C0] sd 0:0:1:0: [sg0] tag#4349 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$UI_DEV_DESTROY(r2, 0x5502) 22:51:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="e701b40500000000ff0361107f0000000000bd050000000000009500d19b0000f4ae00009d3d9629e9e6fdc1f1072cf7c7a0c99bde7c075b04355f3cd35fdebfcd82a2b5034a349c2e2e51655705863fbef8b7669f16894535e567b02e80512d00ad1b0374183f46b245cf6c7ca13776ba3a47f06712d88658c032408876f7c6e4579f521c875b95db5693c51668ab6e719fb2d3498c1cc3aefe537a9b43499ad58d11c213fa010ab9b73b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x78) [ 951.350424][ T4045] usb usb9: usbfs: process 4045 (syz-executor.5) did not claim interface 0 before use 22:51:42 executing program 3: getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="353ce442475a8c0bb4006a8b0000002069110000000000000fa0000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4b) [ 951.568792][ T4045] usb usb9: usbfs: process 4045 (syz-executor.5) did not claim interface 0 before use 22:51:42 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x3}, 0x8) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r0) 22:51:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524, 0xf6}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$unix(0x1, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="360f380acf0f00dc66b83d0000000f23c80f21f866350800d0000f23f8650fc623c3673636f20f78c70000f30f2c41ba66b9120400000f322e660feb6ce8baf80c66b86cf6488b66efbafc0c66b80001c0fe66ef65d9db", 0x57}], 0x1, 0x4, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x80}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 951.769014][ C1] sd 0:0:1:0: [sg0] tag#4351 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 951.779764][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB: Test Unit Ready [ 951.786523][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.796417][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.806262][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.816089][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.825929][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.835766][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.845620][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.862223][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.862345][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.882342][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.892180][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.902013][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 951.911806][ C1] sd 0:0:1:0: [sg0] tag#4351 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x183003) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:51:42 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x3c) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @dev}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) 22:51:43 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x8, 0x1, [], &(0x7f00000000c0)=0x3}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x204000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0xa4}, {0x24}, {0x6, 0x0, 0x0, 0x7ffffffc}]}) pipe(&(0x7f0000000280)) [ 952.495823][ C0] sd 0:0:1:0: [sg0] tag#4288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 952.506773][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB: Test Unit Ready [ 952.514011][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.523924][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.533861][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.543892][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.557435][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.567526][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.577455][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readahead(r1, 0x1, 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x18, &(0x7f00000001c0)={r5}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) sendto$inet(r7, &(0x7f0000000240)="b089e3d9483d2c590795fe77287af4da233e3dc6a7c58d4d6c6d44f5940ae1032d57ca652450818909ac6aa8f4fb5267bbc6623078110bd295fb44d88d7fb9aac027bc53146bb99bb746003204b22b6269adbe892b2ab5d50ad0ccb88821183c1402774d7791708e1b7ddab646857a1d86605a902334cec87cfdc61e9edbe716a35966b302c23a6b0383bf69838271a0766280c48f64c383753e793182b769d0ebb7a768820bfd6716f1913fc849c7050ff517a2d42e779d65394c", 0xbb, 0x20000844, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r8, 0x0, 0x0, &(0x7f0000000480)=""/142, &(0x7f0000000540)=0x8e) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r5, 0x3}, &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0xfa2, 0x7, 0x0, 0x0, 0x0}) [ 952.588446][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.598359][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.608311][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.618223][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.628122][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 952.638018][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[c0]: 00 00 00 00 00 00 00 00 [ 952.725519][ T4113] usb usb9: usbfs: process 4113 (syz-executor.5) did not claim interface 7 before use 22:51:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x400000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:51:44 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0xc00, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x20010, r0, 0x8000000) socket(0x1e, 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x3e7743, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/825], 0x18}}, 0x0) close(r2) [ 953.302445][ T4152] usb usb9: usbfs: process 4152 (syz-executor.5) did not claim interface 0 before use [ 953.338044][ T4154] usb usb9: usbfs: process 4154 (syz-executor.5) did not claim interface 0 before use [ 953.370069][ C1] sd 0:0:1:0: [sg0] tag#4289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 953.380798][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB: Test Unit Ready [ 953.387477][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.397386][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.407302][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.419794][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.429631][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.439467][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.449570][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.459449][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.469277][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.479100][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.488949][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.498974][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 953.508901][ C1] sd 0:0:1:0: [sg0] tag#4289 CDB[c0]: 00 00 00 00 00 00 00 00 [ 954.165647][ C0] sd 0:0:1:0: [sg0] tag#4290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 954.176940][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB: Test Unit Ready [ 954.184313][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.195522][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.205531][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.215442][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.225602][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.235563][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.246437][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.256348][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.266337][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.277422][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.287788][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.297846][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 954.308529][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x244d02) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) getdents(r5, &(0x7f0000000280)=""/131, 0x83) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000240)=0x30) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vcan0\x00', 0x2}) syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r6) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r6, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x3, 0x7fffffff, 0x401}) 22:51:45 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8001, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffbffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40045108, &(0x7f0000000000)={{0x0, 0x64}}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0xe1, 0xfff, 0x1b8f, 0x200}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ad, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000001c0)=""/64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 22:51:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[], 0x18}}, 0x40001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x600400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/sockcreate\x00') chdir(&(0x7f0000000400)='./file0\x00') close(r5) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000340)={0x4, 0x400, 0x0, 'queue0\x00', 0x1000}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x4000000}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4, 0xfffffff7, 0x20}, &(0x7f0000000040)=0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="39015777cb34e0c712b3abaa0552a9cc55400896b52afcb1d54774ccc089ed37237d80b933edc36e6baf63d803be0a476ab7cc5af5a65f2b86868e296cebeade55dd677193a2ff52fe565db62a117eb16a4e6fbd4f3326fda025166ef7e21987c86b9b520d656713cf042df42ebce685a6de9990faf1decf418072fee6e9254b7c7f7138af9cf2b08b3424c6e886762b43079984819d5fd4452f13355d2352713cc44660bdf9cd02e7324faa74bed0fc9342c04b733e661a3421592a1df71e585c8cc9e151ce6fa50354598a98f280a691698f43d6e8624ba4bb355d98a28302fd37bf0322", 0xe5, 0x800, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r6, 0xf0a, 0xffff, 0x48, 0x1, 0x5}, 0x14) [ 954.473605][ T4186] device batadv0 entered promiscuous mode 22:51:45 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x4, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = shmget(0x0, 0x2000, 0x400, &(0x7f0000add000/0x2000)=nil) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xcc440, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000080)=""/41) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r5) ioctl$VT_WAITACTIVE(r5, 0x5607) 22:51:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\a'], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x9, 0x6f}, @mss={0x2, 0x5}, @window={0x3, 0x5, 0x3fd}], 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="09000000e1ff08000f000600440108801c000100400800fe97000000020000000000000021db0000050000000e000200070000ff00010200030000001c0001002005080006000000000000000800000004000000040000000c0002000400040000006b8d1c0001001f0502000000c0000100000000000080ff000000050000000e000200010497008af80300060000001c000100070604000500000002000000070000008c0c000000000000040002001c000100f503f80701010000020000005185000006000000030000000a00020009000200010000001c000100813fffff0000000002000000ca2200000400000002000000080002003f0007001c000100802409009e950000000000000100000007000000060000001000020081000002e4089c01000080001c0001000506810006000000000000000500000009000000040000000c00020000002400ff010001f00008801c0001000680040003000000020000001800000009000000040000000c00020004000010010081001c00010006b80d0fff07000001000000feffffff030000000200000008000200070001001c000100407f00086a0500000100000009000000ff0f0000040000000c0002000004010422d56d051c000100050802009e00000001000000000000000300000002000000080002000000ff001c000100cd8101005e00000006000000070000000800000008000000140002000101890604da77672b0d0400020002001c0001000600040002000000020000000300000021000000020000000800020003002e02"], 0x258}, 0x8}, 0x4000) 22:51:46 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x101, 0x202) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x42}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={r2, 0x58, &(0x7f0000000300)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x7f, @mcast1, 0x86a}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}]}, &(0x7f00000003c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xf8, 0xf8, 0x0, 0xf8, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x48], 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x1, 0x7]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @loopback, 0x0, 0x0, '\x00', 'rose0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) [ 955.592475][ T4213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 955.680795][ T4223] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 22:51:46 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="91206850a293841109b9f45a367e9def8dd3711de891cf515f298f83883929e0bca118ff1a798b490ea64d3bd084756d162ef371112f66616b3664678edb4fff264e1109ea25a7f68b50e4c1b45ffebc3f2a8826f008c24cf176812a7db896e159992e126c8147adb4a4dc5c3bfee452ad05cae0aeabf077dc924c6ca5c89fb84547446539a0225afbfb3039419eb2ceca4e78c5eac3b95b29b5f7d3c1f5ea55d44fb0019cae"], 0x80) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)=0x3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 22:51:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x16, 0x40, 0x3, 0x0, 0x0, 0x0}) 22:51:46 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x68, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 955.899570][ T4213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 956.024484][ T4252] usb usb9: usbfs: process 4252 (syz-executor.5) did not claim interface 3 before use [ 956.056356][ C1] sd 0:0:1:0: [sg0] tag#4294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 956.067042][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB: Test Unit Ready [ 956.073794][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.083634][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.093569][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.103632][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.113470][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.123298][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.133550][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.144422][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.155213][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.165180][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.175013][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.185837][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.195692][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:47 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0xff, 0x2}, 'port0\x00', 0x4f, 0x1001, 0xfffffffa, 0x5, 0x6, 0x7f, 0x6, 0x0, 0x5, 0x9}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e2000000"], &(0x7f0000000580)=0x8) 22:51:47 executing program 0: r0 = gettid() ptrace$setregs(0xf, r0, 0x1ff, &(0x7f0000000080)="dd2ec8c08d46e10e24f43ba76b6e9a3150c70d67db5686166724c82caab05b49e34edb618b2699c1") r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) clone3(&(0x7f0000000380)={0x9112a000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x23}, &(0x7f0000000200)=""/239, 0xef, &(0x7f0000000300)=""/60, &(0x7f0000000340)=[r1], 0x1, {r3}}, 0x58) timer_create(0x0, &(0x7f0000044000)={0x0, 0x1c, 0x0, @tid=r4}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r5+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x8) [ 956.457719][ T4268] IPVS: ftp: loaded support on port[0] = 21 22:51:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000080)) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 956.811785][ T4293] usb usb9: usbfs: process 4293 (syz-executor.5) did not claim interface 0 before use [ 956.850058][ C1] sd 0:0:1:0: [sg0] tag#4295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 956.860829][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB: Test Unit Ready [ 956.867590][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.877470][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.887313][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.897182][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.907030][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.916874][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.926713][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.937152][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.947935][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:47 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 956.959752][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.969929][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.979771][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 956.989598][ C1] sd 0:0:1:0: [sg0] tag#4295 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r1 = gettid() ptrace$setopts(0x4200, r1, 0x0, 0x10005c) tkill(r1, 0xc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x9, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x2, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, r4]) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={r1, r3, r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}) ioctl$KVM_GET_SREGS(r6, 0x8138ae83, 0x0) ioctl$KVM_SET_CPUID(r6, 0xae80, 0x0) 22:51:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0x0, 0xffffffffffffffff, 0x0, 0x0}) unshare(0x40000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/554], 0x70}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000007cd3bd725f2145cbfefab2c071cbae4b8b5bca9eb6e6028a6d106e7cd4e6bc2eee175a59700bcfba3c0553554ba9b93114c167432f4fd3f0368d37611357523d442ea165761c4e9088f60952840d6356fe6c2ecb39c9294b84f4bf24edb6f587a76f20256c47d43d95d5a038823481b8bff92fca689b4750b29cb5e2d36df1bf4d8b994763fdb8df66cc9ad3f4faba4ae356703e19099c721c2ea185a86b1cd1ca83258f1304ab9207cfa5baa7dd2d11bc1e6922c895b63d2b92e64b5d5ddd2329d605e47c71c5455b3e58aa90f233ef741cafd12b968e09a475d0d30916fc04a42ce82b", @ANYRES16=r1, @ANYBLOB="000226bd7000fcdbdf250900000005002a0001000000050035007f00000008002c0007000000060028000000000008003900020000000500350002000000050033000200000005002f000000000008003200090000000800320001000100"], 0x64}}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000005c9f820f9c3c5477ad7db0fb70a1d250e41400000000000000ffff000000"], 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 957.562047][ C1] sd 0:0:1:0: [sg0] tag#4296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 957.572772][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB: Test Unit Ready [ 957.579553][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.589384][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.599184][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.609020][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.618820][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.629422][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.639244][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.649064][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.665410][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.675247][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.685078][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.696217][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 957.706050][ C1] sd 0:0:1:0: [sg0] tag#4296 CDB[c0]: 00 00 00 00 00 00 00 00 [ 957.716681][ T4336] usb usb9: usbfs: process 4336 (syz-executor.5) did not claim interface 0 before use [ 957.770072][ T4340] IPVS: ftp: loaded support on port[0] = 21 22:51:48 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0xfffffffc, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0x0, 0x0, 0x0, 0x1, 0x400, 0xe700, 0x6, 0x1d, 0x10, {0x40002, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) 22:51:48 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x28101) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0x10, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r4) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r5) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x7d, 0x0, 0x100, 0x40, 0x0, 0x0, 0x0}) [ 958.195742][ C1] sd 0:0:1:0: [sg0] tag#4297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 958.206715][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB: Test Unit Ready [ 958.213459][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.223316][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.233226][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.243146][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.253034][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.264815][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.274692][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.285430][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.297742][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.309458][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.319403][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.329309][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.339187][ C1] sd 0:0:1:0: [sg0] tag#4297 CDB[c0]: 00 00 00 00 00 00 00 00 [ 958.623760][ T4270] IPVS: ftp: loaded support on port[0] = 21 [ 959.535108][ C1] sd 0:0:1:0: [sg0] tag#4314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 959.545736][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB: Test Unit Ready [ 959.552359][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.563479][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.573382][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.583983][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.593847][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.603727][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.614184][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.624048][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.633916][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.643813][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.653658][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.663493][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 959.673322][ C1] sd 0:0:1:0: [sg0] tag#4314 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:50 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x4, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 959.708441][ T4340] IPVS: ftp: loaded support on port[0] = 21 [ 960.060869][ C1] sd 0:0:1:0: [sg0] tag#4315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 960.071490][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB: Test Unit Ready [ 960.078258][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.088082][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.098193][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.108621][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.122606][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.132719][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.145595][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.155517][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.166392][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.176224][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.186053][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.196594][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:50 executing program 0: r0 = gettid() timer_create(0x3, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080)="4ad2cc7af79e03", &(0x7f0000000180)="e1747e77fda2c855cd9c9b777bebe3785c4ecb556a41ecb2ad8a9875dc05d7ce42965e62582e0d4b7c6c9c62c92a09"}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 960.207114][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:51 executing program 3: socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001000090468fe07002b006a0046fe0a0026000000450001070300000300000000000000000000c140956deb8f6e8bd164723271d11397f252ec4e5930f2ff770fbbb4bc1ca40abb38cfed5f061caed09411f1e92ae9c1a57b2990bc041da5bfb788aaae690616c49a4fb054e1a34c73da24dcd350637e02ede0c7b115517b8e25d7ff036744bac219a0d314f95d583465c0ffd1c21648af0e7bad2b79aa802e957e649da7f77859959c2bf10c9f485f6b023b4aaa310294bef9c85329692ab6332b1243b5c2683549d62368b98ec46207059f0d3df4dd170ec33ea4f56a3fb3d30aac039181f9", 0xea}, {&(0x7f0000000280)="e19beb13e2107f0ba470df36679e8bc786bb4fe71e56a0311b1f6daae512b6e0979df97da05aff48e1bb1a49f500044e50444a5029e56f61856c527486de0ca0815c3baa61c50e0b94464ee867d9b587ecb545a4aaf5218faae48525d4fc697999ad08575d1baaa2342898bf03cdb3505522e566801800280fbfaf3233", 0x7d}, {&(0x7f0000000040)="d745d7d2b57515a636373cc6bc28caa0e3aa489a15bfcb61fcbab8", 0x1b}], 0x3) [ 960.460098][ T21] tipc: TX() has been purged, node left! 22:51:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 960.652871][ C0] sd 0:0:1:0: [sg0] tag#4316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 960.663660][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB: Test Unit Ready [ 960.670393][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.680351][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.690395][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.700336][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.710238][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.720180][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.730109][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.740051][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.749949][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.759862][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.769748][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.779925][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 960.789799][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c}], {0x95, 0x0, 0x18}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0x6, 0x2, 0x4, 0x2000, 0x7, {0x77359400}, {0x5, 0x8, 0x2, 0x1, 0x8, 0xe6, "2f29a25d"}, 0x6, 0x3, @fd=r3, 0x115b8054, 0x0, 0xffffffffffffffff}) flistxattr(r4, &(0x7f00000002c0)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r5) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r6) ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f00000000c0)={0x0, 0x0, 0x6cb, [], &(0x7f0000000080)=0x54}) 22:51:52 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1000}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) 22:51:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000840)='/dev/null\x00', 0x494140, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYRESOCT=r4], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r5, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfe4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40005}, 0x4004) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1f}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4008011) 22:51:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@mpls_delroute={0xe8, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {0x1c, 0x80, 0x0, 0x3, 0xfe, 0x4, 0xc8, 0x3}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xac}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3}}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0x16c3}, {0xffff8, 0x0, 0x1}, {0x100}, {0x8000}, {0x8}, {0x101}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0xffeff}, {0x6}, {0x4}, {0xfff, 0x0, 0x1}, {0xa9d, 0x0, 0x1}, {0x1}, {0x3, 0x0, 0x1}, {0xff}, {0x2}, {0x4}, {0x80, 0x0, 0x1}, {0x3}, {0x2}, {0x1000}, {0x8, 0x0, 0x1}, {0x7}, {0x1a4}, {0xac3, 0x0, 0x1}, {0x7fff}, {0x7}, {0xfffff}, {0x8001}, {0x3f, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x80}, @RTA_DST={0x8, 0x1, {0x0, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_VIA={0x14, 0x12, {0x10, "b2e67b4b72a3550c9cddaf44dc3c"}}]}, 0xe8}}, 0x80c0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0xc0, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0xd}, {0x8, 0xa}, {0x10, 0xf}}, [@TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x7, 0x4, 0x2, 0x2, 0x5, 0x1000, 0x6}}, {0x10, 0x2, [0x20, 0x7, 0x1, 0x4, 0x7e4, 0x2]}}, {{0x1c, 0x1, {0x46, 0x1f, 0x8, 0x3, 0x0, 0x9, 0x1, 0x7}}, {0x12, 0x2, [0x8, 0x400, 0xfeff, 0xffff, 0x7, 0x11, 0x40]}}, {{0x1c, 0x1, {0x5, 0x3, 0x4, 0x6, 0x2, 0x1, 0x290b, 0xa}}, {0x18, 0x2, [0x0, 0x6, 0xf97a, 0x8, 0x81, 0x49, 0x8, 0xa, 0xd4, 0x81]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004084) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000018c0)={'team0\x00'}) recvfrom(r0, &(0x7f0000000000)=""/44, 0x2c, 0x40000102, &(0x7f0000000080)=@isdn={0x22, 0x20, 0xff, 0x2, 0x20}, 0x80) open(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) [ 961.435435][ T4576] usb usb9: usbfs: process 4576 (syz-executor.5) did not claim interface 0 before use [ 961.529050][ T4583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:51:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc62]}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000040)=0x8) pipe(&(0x7f0000000000)) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000480)={0xf, @raw_data="bd5fd769a67e34ef131e493cd386d8f0146dd4387b3ea778a3ab906b874268e221885588d9ec8bb1b36817c446d176afea661a099a7df5ce515abb6f6597b46fdb86db2a043a48a82091c98841ff9010f31d2f8a67b55acf776642e3ff6203a78fe7307f528a99800bf5577e7af53014905b8ebd1f822d17596f9177abefb362fe63154d54e8ded3057085a7576f8c1c9456b85b65fd53153f58498c462babd0dce31aff345df6b2af96b740ebfecde445274dd1147e19fc77cc95c7e1f4c40fb7e992407d397dba"}) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000180)="a21603e42f88826ebfa7b624bc", 0xd, r4) keyctl$search(0xa, r3, &(0x7f0000000140)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, r4) dup(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 961.746856][ T4576] usb usb9: usbfs: process 4576 (syz-executor.5) did not claim interface 0 before use 22:51:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) [ 962.324263][ T4593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 962.397565][ T4635] usb usb9: usbfs: process 4635 (syz-executor.5) did not claim interface 0 before use 22:51:53 executing program 1: socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4800, 0x0) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x24514099, 0x4000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) chmod(0x0, 0x4d) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0xa04, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x259) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) signalfd(r5, &(0x7f0000000100)={[0x2]}, 0x8) [ 962.636183][ T4635] usb usb9: usbfs: process 4635 (syz-executor.5) did not claim interface 0 before use [ 962.769175][ C0] sd 0:0:1:0: [sg0] tag#4326 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 962.779962][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB: Test Unit Ready [ 962.786779][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.796799][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.806752][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.816693][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.826779][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.836691][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.846628][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.857272][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.872402][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.883287][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.893190][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.902959][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 962.912906][ C0] sd 0:0:1:0: [sg0] tag#4326 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:53 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x145) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 963.169781][ T4673] sg_write: data in/out 1717986882/283 bytes for SCSI command 0x0-- guessing data in; [ 963.169781][ T4673] program syz-executor.4 not setting count and/or reply_len properly 22:51:54 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xae29c7b15de63ee, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1411, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) [ 963.514893][ C0] sd 0:0:1:0: [sg0] tag#4327 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 963.525673][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB: Test Unit Ready [ 963.532306][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.542281][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.552279][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.563144][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.572896][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.582792][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.592894][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.600463][ T4666] debugfs: Directory '4666-7' with parent 'kvm' already present! [ 963.602802][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.620393][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.630403][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.640463][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.650345][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) write$P9_RFSYNC(r3, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="1593000000000000000001"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) [ 963.660403][ C0] sd 0:0:1:0: [sg0] tag#4327 CDB[c0]: 00 00 00 00 00 00 00 00 [ 963.815307][ T4706] usb usb9: usbfs: process 4706 (syz-executor.5) did not claim interface 0 before use [ 963.825578][ T4706] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0000 i0000 l0 [ 963.914010][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 963.928708][ T4673] sg_write: data in/out 1717986882/283 bytes for SCSI command 0x0-- guessing data in; [ 963.928708][ T4673] program syz-executor.4 not setting count and/or reply_len properly 22:51:54 executing program 0: r0 = gettid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f00000001c0)={{0x4, @addr=0x5}, 0x8, 0x10000, 0x7ff}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000130a010200000000000000001000000408000340000000090c00064000000000000000020800034000000009c2731f87f657d542ec993e789db3ed3b7404c3188b92f2a6e209fffbb631fd889d4aeaa91813da128b5467535b046f600d883fb9c7821300d6d5e3273f574a6627e8974e24bf727aad40ae611058946dea55f1d4d617305105572118a440b2650cd3e38b599dfa9fa222d065d362e805ec0c6ec165e5695d5a9fa94d996bf91dcb5c065920e6c5fdafa9f496aea24d1861ae1767462264b4a0030f48be"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000003c0)="9f5382595208ef8f2ffa16b0222d61f7a47a90cd39440ee7e2b7c63bbd0ffe4276a7b0d6f089d5f9f821cb917c7a01e94ce8869efe3ff22d851f11", &(0x7f0000000400)="d7745216eaf388faf439b3df69e5eb37c1dcb4031a49780712516b071aa0bf85406f714a21a1224bdac56ce72b82feacf402e16e15d80bd20a75da19e4ab949a376329b1ef4f8c60e8b695e9be3b935a1f0600afad9e7b7c0296c204000000f66ea6aadba1d009c361b0749561083c16aed33de48c19d4ea96d5b7ead5855349316c7fb88a1c2bafc3d8a68abf8ff0a3f6a7d8df3fc9d4e6d9e2a42d41c54825fa7ffd4201f7159a7a387a4de52d722297dcaa4ad88d"}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r3+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 964.392652][ T4706] usb usb9: usbfs: process 4706 (syz-executor.5) did not claim interface 0 before use [ 964.402744][ T4706] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0000 i0000 l0 [ 964.497106][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 22:51:55 executing program 0: r0 = gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) timer_create(0x2, &(0x7f0000044000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000fb0000/0x2000)=nil, 0x2000}) 22:51:55 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x7, 0x3ffffffe, 0x2, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) io_submit(0x0, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780), 0x4000}]) io_pgetevents(0x0, 0x1f, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f00000001c0)={[0xf7]}, 0x8}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9207ac3d78578fcd292a8fcd277cb57f5650731dbaf12ea772d0000000000000003d6c1610c621c85fe3e3485460af173b9bede5105e65b5328de821ef57e8d4306f47f6ea4a656379adf275ca89b94b83f221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac82feaa718c023043d03a6fb4862e0353a7efd2f2d23d90b8411f1b34ce144800897c857c2272248f0604b910806046113d82e6257074807ee943994f587eb64d28c7eb86249403f04ffa8265c76eb17877fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04abe73456e9b828ae419b20f2e7cb670020000000000000000000066e9239a4e344cded8df72bc1b9ab22018000000000000003e1b98da06c1f545bafb01ffa71e6e3888e1abb1436f84c61f937487f1446c76af68b1242547fd0e93baea5da870099a43c5e138cdf9adedd4883674f22ebf9b6f25f27680a977f24040094d32ce2e7c31e37e9f4d5b37d0c6876011b3492ba3619088e459ed8572669d96bd411eb260000003b5a3f96d22ed91c00d715b359610b8021d9a4ce23e89273704cb8e0afe3c87dadd39bda4a43e866f2f161427cdbaff0f7382c9417bd73f92198235f9b214db6e4682d9d1e76cc5d2de30c3a8a33a94f2c9a1e673ab05e99b0fc125854c94dd24d10151c06efe97d5b126566289df476b04dcb5eece75a7cec62efa1f18ed29f4899890e2f71575add5c382f528cd964f536c628ba0a4a82211bf0198bdf53d6b8c0fe8ae40722ac6b3558ff607535c0641d149ec16de347899696c13c778ac424f34b91b7531bb9cfb4277e20fbc6fb17ec735f9fa3d52cee66ddf79a83b901dbb5831fb8c9942c8a84034ca24a7cfa5bd55558dab5af49d6e2aa00ad262a5377a24c4bfb0c88f500e65377e85b28611dd415b9853d3b48283d289c3bb01bb92a5d2537a14fc31b1108e00000000000000000d89b8530d755b8522e3f33fc715059d4426529677f8101b18bbf986c6a92af1a9f6e9876ee54ab05b4392e529d9763f6f38893d839a022beb1fd19c6acd12f7a04ea7a9258365c144691030f958a8b9625e54937f72af9f7286f35cb5639a5ea99de1d77a9d0ad4780ef2259ce90ad44329400"/840], 0x18}}, 0x0) close(r1) 22:51:55 executing program 1: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x612881, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) shutdown(r4, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7ff, 0x64101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f000047efe8)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r0) 22:51:55 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) tkill(r0, 0x1000000000016) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x30) ioctl$RTC_VL_CLR(r2, 0x7014) 22:51:55 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x100000001, 0x408100) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x10200, 0x0, &(0x7f0000ff5000/0x8000)=nil}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x4, 0x3b7e, 0x1, r0, 0x0, &(0x7f0000000100)={0x20032, 0xd71a, [], @ptr=0x1000}}) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 964.974241][ T21] tipc: TX() has been purged, node left! [ 965.002823][ T21] tipc: TX() has been purged, node left! [ 965.082690][ T4784] usb usb9: usbfs: process 4784 (syz-executor.5) did not claim interface 0 before use [ 965.125930][ T21] tipc: TX() has been purged, node left! [ 965.418459][ T4818] usb usb9: usbfs: process 4818 (syz-executor.5) did not claim interface 0 before use 22:51:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5001000010000307ebfff4060dc600004004120079225f81c4fe1e108f17442706588a7d75f9bb5b41276e7fcc268ed99295a819c9dd0100000000000000097d1dd6d82f39b7e8790314bc5e62640bcde9267471f892a42c455c3aa9e91cb1c9bcd8c62e033b47cffe3eb46eba3ee58a17e0cd112967c4ca74b8dfb71a886af725f44baf89bd26003e5d678d404549ec8826f6ab7647bb4e404a5f7bb15b3cdfc2fe87e6a9c4f7c6588512a67677f759d967c9e4093bdd1b334ec6a7c714f289e66bad97397367ea90516c6e26565f0e5fd92942b2f8369e58d71b", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f00000022c0)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="ea9962cb1f34ab4982d6683d30759747252dc2eca10feeeabe5dae212d7718b9adff8edb3ed1d272bb38936088724f535d4d7d2972f6da42843adddde9b5ca0ff574fe34021b6f018dfe6548ee3e4966", 0x50}, {&(0x7f00000005c0)="687f7d1f605cb249e849821f56bdaa6d794ff00a52bb965e5be89796becb2cce248bb38eac46136d8a77ecb413b82afacbdc91268b9da79196765d801355a2a3a8dd07351c19bbb6bbf9aa1faeb96c18ad34a909e891d4d7a6f0575d8cd207841643fece1e8d7e529853ebb0b35d5642b068b7aab97b4f21ad7a5fb0710e77548110b66060d39699152590fd52287bf0e462f9292887329566ad904d2615edeb370e796eab06bceb25623d84", 0xac}], 0x2, &(0x7f00000006c0)=[@iv={0x100, 0x117, 0x2, 0xea, "917f86e871151ab481d863081f71706c8d5af17edc960e096864cc661b94977c87214c7188ab164555970b63005bafe8a8d45bd05fe238f50194aed4214c9b39020d1f698a92685b5faf856b379b6cb4ce42feda1f930e61b81c8b0b75edc1ade36628dd7a882217823907cfc1be2ad8b154151fa4bcd2cde12a3aea108909cd74d0407502eb33b87b27fbe3b769af3997cf0b16b4885fa79fc545ddc95a835ff88f9f133eaf026a826745aef8c97f3b74ef53d11afbce51669e18db1251e491f45a0bfd507cc9104a45891a26f67d416a8614087c2a14ea33779f4c468fa2852e07c95bcdf16e22ce50"}, @iv={0xe8, 0x117, 0x2, 0xd2, "3fe8abbb7f3bce6c66514d9299890330203afeb541829d90a257d29177f8a922c5374d58b8d6e6f6d0ef43f734d19aa678488bb1ba7ed473db69029f4a080357d9707275a3ea56dfbb637ed0138d1d3e2b84690586554695bdd76d3e740a774e85edc36cb8f904ee549fd0c4af9a1fce03baa15f18c5d4435dc483f8ff41b9ce628ed19bce24858c9cb59a303ce7075e9dfdfbaa24104eb30545451c348788683afbffa8b7547b53e0d5e9828a1d70e1eb6ccaa9985d0a7cfc769df00570a38a32da007f59ec515d27f98489d925f01c7118"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}], 0xff90, 0x40448d0}, {0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001900)="124ac389a9233a959cdb6411192add70225964e67c9e0f089b83c2735a3f55d21b2913815e88acb41c19adbbdadd97db22978050021bb570f07db1bdfc1d2f92e8ccc9430a00dc60dc541eeea36fc114e288d055c4181889bbc64bbd90ea27c89d04cacf62710e3b4e9584c128e7025bbe4aab575d3f5e9db342373ae0e9093001c577d5aabc775d51215788670642df82ceba83c468e82787682b18f8b099bfb9d71bfb555b00da1a957dad0c6d31378d68140f874630932266c6a0d5d6c121594909d275aa0b4960c06fd89a086deadf56945bb3cf953838c23f0deb21377ab73514", 0xe3}, {&(0x7f0000001a00)="823cf8bb4aa117eaec94552a33ac92f036167ff9af380022dcec152781bb7c12f51b4ba14c94a55efdb8a964b0c2ae7113484ed3c39c4ad5cb2489d06faff403e10238eb49d1f1e82ccdaffb7d383203eecfd7370cdc4b35606b95a432cff33c25673ad5cf827c0a", 0x68}, {&(0x7f0000001a80)="03d193ba94764b4da2630155f76086538257e2628d83af2dc582ba3b3e3f25771059ed11e021b94928ffac67068430c1f48ba41073d32fe11d4a473321f158805e1e888d28b1799fdd4420148b28ca6efa7cc2ac22af78c68263394e881f96bfbf6801ec742b7462626fe2ceae32b4795750d8ae179a35688822b1d9e07c40f33a30152d03968ab9417e220b2f25bec141d2183cadc730d87c6db43bc1cf82f9814d54b857519b200977fa8ab258265f5340652dcdf89e287c434e06d495642ef508f3f24e220bd0b9404949a4c2defc889a7ddc48d6da6a46e2cdcc698e954139c89f", 0xe3}, {&(0x7f0000001b80)="1735f72e323f9eb068f4d70810638b2905cb327f060102b0da1a3418e78ce2763242d50468ebe4ed5e5ba78d7bb7f42a1326b1b47d2b326882e0b768d38071951e32f039ddf990115b4f8b92b776be953ed2f7e4d989ffe2a6c741458dc0c5e3c3ad93db466563b4da2449a2298869898ecebecce790d6a00b523e5040dac5ac6a3e123ff4247550bc9b898ecb72faaf7909e62397c9d10af1fe24aead180cb44e78a0c3039ae3117d056b0fdbd2a461e8ac", 0xb2}, {&(0x7f0000001c40)="284d0fa88d7cc4968124d54e9803956665d581895a157ca2afb8326b319db78468bce9e68e7363c8ab5e611a04ef1c1925c7f6eead37c77d9efd9882cb4092da51b68fa23491e34e4d72810e9da954cdef04e446cb56266308f335aad28098461d2b32069328839a0199a1a9fe7b6b7f29ddeec5019cf095fa82fec2d48e6aaac7e89c96c30b693bedca3d78e6e94dfe53f757f25350675dd76273cd0a7cc12ac5265ec056ccc3c5bb648e6d76dfd3300fe96a784bfa1139cae52d1e997d155751b27498def6dd5dbeffb4d63032bf21dff05df48da921b2ce5d74d930c1cc7b33639bc7cdf5", 0xe6}, {&(0x7f0000001d40)="94b3f9a209928a9e4d02cbe58ac9bf20eb3c966bc2e7f7258c3b91dc23f39c04831e00c5f030df7151187da20a3f71b9309d9cd1fc3ce3ee846c4048c3166917da2c94cda07f86339a70633dde4c12df4694caa326a0f5f9a107e929de4df480348851c44a629e09777551e307aa20fc14a2598b0a5d908fbe87ddc719aadebb598f55b44a7a23f976519259d38db168f938ca2542c97153be421dbb098fe2e41c8dce7b14d7b34e89c6991f", 0xac}, {&(0x7f0000001e00)="84c3a5a7bfc9b71a68e28d982b1cf0d956897aa9c539ae01c9768e52985fdc2750e569599ff5e6d532bfc384ad64e29e1c40176ff39ee6003c3e11cf406b719452e812db87e5", 0x46}, {&(0x7f0000001e80)="48733eabf67da123637ca7c9699ec60b44bfea525faced5f42d286f187e31c8980f4c90d2b18898404afea2946094d5ad9665fda7f4d7c068d11ecbf92d8c0b5125c6abcf24b1937669adcae11f160593e4008c9", 0x54}, {&(0x7f0000001f00)="63c754367af13848573e8b6f87ec8c641e93940c6a662a3bd80a1f0c5439b91f98e11c34628f308bec191f03cda89d2b44d1623b5d2170c3651147e1f244bb5a97edc5c1f36bcee2dfe25ce006bc9b3910ca143cb9425bef3849adef5582872de07d9f590f0eee296ade2bfb2b02acd6b906d242511397a61e4c2858ef5180f8cd8b334c295d80cc", 0x88}], 0x9, &(0x7f0000002080)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xfffffe01}], 0x78, 0x10}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002100)="60f9c5d5e303e3ab3ac78e13535404973187238b9463ed690515b716246851edaf4966c4b7f205f4f93fc41e64e26eb12248673f9e5affcf724455b7dd0b7bba63421e7eb3b7b11306ea14dda51977ab3fcb9d7a8c24c4f4060efd41773b1c17c0f73f0d7cd696590971f950abac505b2affcf525d4fc8149bfc3048d6bda3b6e2e224926ea2dc0496c20d0c1a575b", 0x8f}, {&(0x7f00000021c0)="389a055e47d1518fa409add235c381936173f1027d50469abe52ce7a7fa494b7635a3855914033d6cea276086268ce64a371acf8", 0x34}, {&(0x7f0000002200)="0f02d522a8ea5b605d4dafa32765a52af0719a303b525de0e896a48179427e8ed5f408cd61d7f9bcb4aa9e7bc9cef6", 0x2f}], 0x3, &(0x7f0000002280)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x100c0000}], 0x4, 0x4000000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000380)='veth1_macvtap\x00') bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltclass={0x6c, 0x29, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x31e4b583eba7d73d}, {0x5, 0xc}, {0xa, 0xd}}, [@tclass_kind_options=@c_taprio={0xb, 0x1, 'taprio\x00'}, @tclass_kind_options=@c_netem={0xa, 0x1, 'netem\x00'}, @tclass_kind_options=@c_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x7, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x917, 0x101}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3e8, 0xa01, 0x0, 0x25dfdbfe, "", ["", ""]}, 0x10}}, 0x4000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) 22:51:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:51:58 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000001c0)=0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/844], 0x18}}, 0x0) close(r1) 22:51:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20040810) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x1b}]}}}]}, 0x44}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000240)={0x80, 0x0, 0x10000, 0x8001}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000280)={0x2, r6, 0x10001}) 22:51:58 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) mmap(&(0x7f0000a4b000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x200000032, r3, 0x0) tkill(r0, 0x1000000000016) [ 967.341463][ C0] sd 0:0:1:0: [sg0] tag#4334 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 967.352112][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB: Test Unit Ready [ 967.358897][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.368834][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.378719][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.388624][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.392239][ T4842] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 967.398497][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.398609][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.398714][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.398820][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.398915][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.455794][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.465693][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.475584][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 967.485566][ C0] sd 0:0:1:0: [sg0] tag#4334 CDB[c0]: 00 00 00 00 00 00 00 00 [ 967.838939][ T4846] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 968.132430][ C0] sd 0:0:1:0: [sg0] tag#4335 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 968.144336][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB: Test Unit Ready [ 968.150959][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.160956][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.170878][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.180808][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.190762][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.201600][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.211934][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.221837][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:51:59 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1e1000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x400, 0x201e, 0x4, 0x5, 0x8, 0x2, 0x5}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 968.232629][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.243227][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.253956][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.263819][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 968.274010][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[c0]: 00 00 00 00 00 00 00 00 22:51:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004843, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x80000001}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000100)="04", 0x1, 0x2000c807, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x88002, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)={0x1, 0x81, 0x1000}) shutdown(r1, 0x0) 22:51:59 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0xc}) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="100000000500"/16, 0x10}]) 22:51:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7f00000010003b0e80ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000050000000008000a5d", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700ff0f00010500170000000000060003003f"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 968.651746][ T4972] netlink: 87 bytes leftover after parsing attributes in process `syz-executor.2'. [ 968.733303][ T4975] netlink: 87 bytes leftover after parsing attributes in process `syz-executor.2'. 22:51:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) dup2(r2, r4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @dev}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10) [ 969.024811][ T4983] device veth0_to_bridge entered promiscuous mode [ 969.051664][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 969.103453][ T4989] device veth59 entered promiscuous mode [ 969.122274][ T4989] device veth0_to_bridge left promiscuous mode [ 969.154141][ T4981] device veth59 left promiscuous mode 22:52:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @nested={0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x18, &(0x7f00000001c0)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0xfffe, 0x400, 0x3ff, 0x1, r5}, 0x10) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:52:00 executing program 4: socket$inet6(0xa, 0x1, 0xffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) accept4(0xffffffffffffffff, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000080)=0x80, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x40000811}, 0x20008004) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 969.194808][ T4989] device veth0_to_bridge entered promiscuous mode [ 969.227222][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 969.238385][ T4989] device veth59 entered promiscuous mode [ 969.270552][ T4989] device veth0_to_bridge left promiscuous mode [ 969.314984][ T4981] device veth59 left promiscuous mode [ 969.395152][ C0] sd 0:0:1:0: [sg0] tag#4336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 969.409892][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB: Test Unit Ready [ 969.416840][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.426811][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.437531][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.457124][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.467123][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.467330][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.486959][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.496830][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.506705][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.516530][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.526437][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.537307][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 969.547326][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:52:00 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() socket$alg(0x26, 0x5, 0x0) r1 = shmget(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0xf5, 0x0, 0x1, 0x9, 0x6, @random="36f5c49d13b9"}, 0x14) ptrace$getregs(0xe, r0, 0xf1, &(0x7f0000000240)=""/137) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000100}, 0x0) read(r3, 0x0, 0x0) 22:52:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0xfffff001, "445d631d2117befb3500628c65b66027b5cf518599ff97ef07d4b8ad58008bd1"}) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b056f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e9e2237f267b0ee0ce30e80600cff8ca2996e518e3e69051"], 0x155) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) [ 970.110914][ C1] sd 0:0:1:0: [sg0] tag#4341 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 970.121545][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB: Test Unit Ready [ 970.128379][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.141317][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.151548][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.161373][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.171162][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.181038][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.200750][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.210563][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.220383][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.230180][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.239981][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.249862][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 970.259646][ C1] sd 0:0:1:0: [sg0] tag#4341 CDB[c0]: 00 00 00 00 00 00 00 00 [ 970.344008][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 970.593059][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 970.620661][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 972.382573][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 972.394950][ C0] clocksource: 'acpi_pm' wd_now: bf8b36 wd_last: 3e2065 mask: ffffff [ 972.405156][ C0] clocksource: 'tsc' cs_now: 20cbe09f3bf cs_last: 20b793d79f8 mask: ffffffffffffffff [ 972.416732][ C0] tsc: Marking TSC unstable due to clocksource watchdog [ 972.440980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 972.466236][T30501] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 972.475912][T30501] sched_clock: Marking unstable (972523283551, -57076089)<-(972469641758, -3432991) [ 972.476207][ T5037] clocksource: Switched to clocksource acpi_pm [ 972.662721][ T32] audit: type=1326 audit(1593989523.500:32): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5024 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 972.709635][ C1] sd 0:0:1:0: [sg0] tag#4342 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 972.725624][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB: Test Unit Ready [ 972.732259][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.742211][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.752072][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.761992][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.771845][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.781687][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.791540][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.801397][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.811307][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.821183][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.831030][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.840898][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 972.850754][ C1] sd 0:0:1:0: [sg0] tag#4342 CDB[c0]: 00 00 00 00 00 00 00 00 [ 972.985387][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 973.059841][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 973.072702][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 973.692106][ T32] audit: type=1326 audit(1593989524.540:33): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5024 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 973.722800][ C1] sd 0:0:1:0: [sg0] tag#4343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 973.733498][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB: Test Unit Ready [ 973.740126][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.750120][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.760049][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.770401][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.780318][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.790213][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.800090][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.809967][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.819820][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.829693][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x4}, {0x45}, {0x6}]}) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x10000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) dup3(r0, r1, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010027bd70004331ecacedde66ee"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) [ 973.839548][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.849414][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 973.859273][ C1] sd 0:0:1:0: [sg0] tag#4343 CDB[c0]: 00 00 00 00 00 00 00 00 [ 973.979698][ T32] audit: type=1326 audit(1593989524.830:34): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5062 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 22:52:04 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x40}, 0x48) 22:52:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) [ 974.176921][ C0] sd 0:0:1:0: [sg0] tag#4344 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 974.187693][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB: Test Unit Ready [ 974.194854][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.204948][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.216381][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.226438][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.236366][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.246466][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.256330][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.266542][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.276530][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.290236][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.300939][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.310950][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.321843][ C0] sd 0:0:1:0: [sg0] tag#4344 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:05 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x21, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0xffffffff, r2, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) socket$pptp(0x18, 0x1, 0x2) unshare(0x40000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000d0a03000000000000000000000000010900010005797a30000000000900010073797a3000100000229941859211934a667b304ce959c0c708562f1a0b65a2d4d60faa5bc978ca2957dee690e08b78"], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 974.571588][ C1] sd 0:0:1:0: [sg0] tag#4345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 974.582236][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB: Test Unit Ready [ 974.588985][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.598819][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.608679][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.618568][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.638169][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.648036][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.660496][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.670766][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.680694][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.690661][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.702514][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.712499][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 974.722347][ C1] sd 0:0:1:0: [sg0] tag#4345 CDB[c0]: 00 00 00 00 00 00 00 00 [ 974.789089][ T5090] IPVS: ftp: loaded support on port[0] = 21 22:52:05 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) tkill(r0, 0x1000000000016) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x28}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008d8}, 0x4000004) [ 975.307514][ T32] audit: type=1326 audit(1593989526.160:35): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5062 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 975.358808][ C0] sd 0:0:1:0: [sg0] tag#4347 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 975.369559][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB: Test Unit Ready [ 975.376308][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.386131][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.395949][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.406490][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.416306][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.426130][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.436237][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.446091][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.456088][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.466028][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.484227][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.494162][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 975.505298][ C0] sd 0:0:1:0: [sg0] tag#4347 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r2, 0xae9a, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 22:52:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={[0x7]}, &(0x7f00000001c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9207ac3d78578fcd292a8fcd277cb57f5650731dbaf12ea772d0000000000000003d6c1610c621c85fe3e3485460af173b9bede5105e65b5328de821ef57e8d4306f47f6ea4a656379adf275ca89b94b83f221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac82feaa718c023043d03a6fb4862e0353a7efd2f2d23d90b8411f1b34ce144800897c857c2272248f0604b910806046113d82e6257074807ee943994f587eb64d28c7eb86249403f04ffa8265c76eb17877fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04abe73456e9b828ae419b20f2e7cb670020000000000000000000066e9239a4e344cded8df72bc1b9ab22018000000000000003e1b98da06c1f545bafb01ffa71e6e3888e1abb1436f84c61f937487f1446c76af68b1242547fd0e93baea5da870099a43c5e138cdf9adedd4883674f22ebf9b6f25f27680a977f24040094d32ce2e7c31e37e9f4d5b37d0c6876011b3492ba3619088e459ed8572669d96bd411eb260000003b5a3f96d22ed91c00d715b359610b8021d9a4ce23e89273704cb8e0afe3c87dadd39bda4a43e866f2f161427cdbaff0f7382c9417bd73f92198235f9b214db6e4682d9d1e76cc5d2de30c3a8a33a94f2c9a1e673ab05e99b0fc125854c94dd24d10151c06efe97d5b126566289df476b04dcb5eece75a7cec62efa1f18ed29f4899890e2f71575add5c382f528cd964f536c628ba0a4a82211bf0198bdf53d6b8c0fe8ae40722ac6b3558ff607535c0641d149ec16de347899696c13c778ac424f34b91b7531bb9cfb4277e20fbc6fb17ec735f9fa3d52cee66ddf79a83b901dbb5831fb8c9942c8a84034ca24a7cfa5bd55558dab5af49d6e2aa00ad262a5377a24c4bfb0c88f500e65377e85b28611dd415b9853d3b48283d289c3bb01bb92a5d2537a14fc31b1108e00000000000000000d89b8530d755b8522e3f33fc715059d4426529677f8101b18bbf986c6a92af1a9f6e9876ee54ab05b4392e529d9763f6f38893d839a022beb1fd19c6acd12f7a04ea7a9258365c144691030f958a8b9625e54937f72af9f7286f35cb5639a5ea99de1d77a9d0ad4780ef2259ce90ad44329400"/840], 0x18}}, 0x0) close(r1) 22:52:06 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) getsockopt$inet_buf(r5, 0x0, 0x24, &(0x7f00000002c0)=""/4096, &(0x7f0000000100)=0x1000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}, 0xd) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 22:52:06 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xc) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x2, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x8, 0x9, {r3}, {r5}, 0x6, 0x9}) sched_getaffinity(r6, 0x8, &(0x7f0000000100)) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 976.172216][ C0] sd 0:0:1:0: [sg0] tag#4348 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 976.182907][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB: Test Unit Ready [ 976.189703][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.199589][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.209463][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.219356][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.233803][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.233932][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.253461][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.263306][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.273193][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.282930][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.292797][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.302677][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.312538][ C0] sd 0:0:1:0: [sg0] tag#4348 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:07 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') tkill(r0, 0x1000000000016) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r3) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write$P9_RLERRORu(r4, &(0x7f00000001c0)={0x11, 0x7, 0x1, {{0x4, '#,:\\'}, 0x4}}, 0x11) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r5) mmap$usbmon(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r5, 0x6) 22:52:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="48e8ffff0f000d07cdd87d340754000000000000", @ANYBLOB="3c08a692663a4393c97602607b", @ANYBLOB="0000000000000000280012000c0001007665746800000000", @ANYRES32=0x0, @ANYBLOB="775956ed408a2ed49d6cf9f9b724f5ecdc4918deae363bcef5b89f83a2387bfb255f4a7e2dd8d9aa7129a1a794dbc6963fba71fd46977cc84b39789e621ee6a1f65fc28622d225bd3d2fddd793b10f0a91c9d1d243984c4b9f7d50f5228260e28c4175f18fa2e72d599955ca29804a349ac608d72a8e05a9c0bcbdd78faa21"], 0x48}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r4) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000240)={'tunl0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000280012800b00010067656e6576650000180002801400070000000000000000050000005817cf65053124176de7e9993305000000000108000500e149a7fc1e8c9cb2010ba66e082255063ceba0ae", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x58}}, 0x0) [ 976.626852][ C1] sd 0:0:1:0: [sg0] tag#4349 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 976.637492][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB: Test Unit Ready [ 976.644371][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.654329][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.664221][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.674120][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.683995][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.698504][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.708388][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.718270][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.728150][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.738036][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.747934][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.758521][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.768430][ C1] sd 0:0:1:0: [sg0] tag#4349 CDB[c0]: 00 00 00 00 00 00 00 00 [ 976.825747][ T5090] IPVS: ftp: loaded support on port[0] = 21 [ 976.939238][ C0] sd 0:0:1:0: [sg0] tag#4350 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 976.950622][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB: Test Unit Ready [ 976.957353][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.967380][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.977339][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 976.988436][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.002640][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.012743][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.022760][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.033600][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.043559][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.053486][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.064145][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.074983][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 977.084924][ C0] sd 0:0:1:0: [sg0] tag#4350 CDB[c0]: 00 00 00 00 00 00 00 00 [ 977.171504][ T5173] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 977.188965][ T5173] device geneve2 entered promiscuous mode 22:52:08 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r4, 0x9}}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x9}, {0x4}, {0x6, 0x0, 0x0, 0x7fff7ffb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000000c0)=0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)={0x17, 0x7, 0x1, {{0xa, '/dev/zero\x00'}, 0x9}}, 0x17) 22:52:08 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x10040, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9207ac3d78578fcd292a8fcd277cb57f5650731dbaf12ea772d0000000000000003d6c1610c621c85fe3e3485460af173b9bede5105e65b5328de821ef57e8d4306f47f6ea4a656379adf275ca89b94b83f221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac82feaa718c023043d03a6fb4862e0353a7efd2f2d23d90b8411f1b34ce144800897c857c2272248f0604b910806046113d82e6257074807ee943994f587eb64d28c7eb86249403f04ffa8265c76eb17877fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04abe73456e9b828ae419b20f2e7cb670020000000000000000000066e9239a4e344cded8df72bc1b9ab22018000000000000003e1b98da06c1f545bafb01ffa71e6e3888e1abb1436f84c61f937487f1446c76af68b1242547fd0e93baea5da870099a43c5e138cdf9adedd4883674f22ebf9b6f25f27680a977f24040094d32ce2e7c31e37e9f4d5b37d0c6876011b3492ba3619088e459ed8572669d96bd411eb260000003b5a3f96d22ed91c00d715b359610b8021d9a4ce23e89273704cb8e0afe3c87dadd39bda4a43e866f2f161427cdbaff0f7382c9417bd73f92198235f9b214db6e4682d9d1e76cc5d2de30c3a8a33a94f2c9a1e673ab05e99b0fc125854c94dd24d10151c06efe97d5b126566289df476b04dcb5eece75a7cec62efa1f18ed29f4899890e2f71575add5c382f528cd964f536c628ba0a4a82211bf0198bdf53d6b8c0fe8ae40722ac6b3558ff607535c0641d149ec16de347899696c13c778ac424f34b91b7531bb9cfb4277e20fbc6fb17ec735f9fa3d52cee66ddf79a83b901dbb5831fb8c9942c8a84034ca24a7cfa5bd55558dab5af49d6e2aa00ad262a5377a24c4bfb0c88f500e65377e85b28611dd415b9853d3b48283d289c3bb01bb92a5d2537a14fc31b1108e00000000000000000d89b8530d755b8522e3f33fc715059d4426529677f8101b18bbf986c6a92af1a9f6e9876ee54ab05b4392e529d9763f6f38893d839a022beb1fd19c6acd12f7a04ea7a9258365c144691030f958a8b9625e54937f72af9f7286f35cb5639a5ea99de1d77a9d0ad4780ef2259ce90ad44329400"/840], 0x18}}, 0x0) close(r1) [ 978.239308][ C0] sd 0:0:1:0: [sg0] tag#4351 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 978.249979][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB: Test Unit Ready [ 978.256765][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.266688][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.276710][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.286663][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.296677][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.306716][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.316655][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.326615][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:09 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000010000104000021000000000000000000", @ANYRES32=r3, @ANYBLOB="80000000000000000a000100aaaaaaaaaa340000"], 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 978.336564][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.346476][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.356418][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.366387][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 978.376316][ C0] sd 0:0:1:0: [sg0] tag#4351 CDB[c0]: 00 00 00 00 00 00 00 00 [ 979.014840][ C0] sd 0:0:1:0: [sg0] tag#4288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 979.025499][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB: Test Unit Ready [ 979.032129][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.042122][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.052150][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.062106][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.072027][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.084111][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.094050][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.104204][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.114158][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.126892][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.136867][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.147692][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 979.157888][ C0] sd 0:0:1:0: [sg0] tag#4288 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0xc, [0x0, 0x0, 0x0, 0x4, 0x2], 0x1}}}}]}, 0x88}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r7 = accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f00000001c0)=0x49a01052, 0x4) close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) r8 = accept4$phonet_pipe(r6, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) setsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000140)=0x1, 0x4) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:52:12 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r2) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) r3 = request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='%-\'\x00', 0xfffffffffffffff9) add_key$fscrypt_provisioning(&(0x7f00000001c0)='fscrypt-provisioning\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)={0x1, 0x0, "c0c128dd77a6effefb8c4c70ec517718c3"}, 0x19, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:12 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000980)={0x62, 0x19, [], [@hao={0xc9, 0x10, @ipv4={[], [], @multicast2}}, @ra={0x5, 0x2, 0x2}, @pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x18, {0x1, 0x4, 0x68, 0x2, [0x7b73, 0xffffffffffffffe1]}}, @generic={0x0, 0x67, "623fe3c4ca7b2c052ee5ddff27ac69d6e6b5c0a9889e54d7304fce3114f2b2781476a518b428e05c0d610254526bbc327e9f38150c177fa303eb4a22779cfba19be0de468127739debd5deb6be596cfab0570fa6e4b2b7ea4db86628bafe016802d8756d6c8c75"}, @ra={0x5, 0x2, 0x101}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}]}, 0xd8) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9207ac3d78578fcd292a8fcd277cb57f5650731dbaf12ea772d0000000000000003d6c1610c621c85fe3e3485460af173b9bede5105e65b5328de821ef57e8d4306f47f6ea4a656379adf275ca89b94b83f221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac82feaa718c023043d03a6fb4862e0353a7efd2f2d23d90b8411f1b34ce144800897c857c2272248f0604b910806046113d82e6257074807ee943994f587eb64d28c7eb86249403f04ffa8265c76eb17877fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04abe73456e9b828ae419b20f2e7cb670020000000000000000000066e9239a4e344cded8df72bc1b9ab22018000000000000003e1b98da06c1f545bafb01ffa71e6e3888e1abb1436f84c61f937487f1446c76af68b1242547fd0e93baea5da870099a43c5e138cdf9adedd4883674f22ebf9b6f25f27680a977f24040094d32ce2e7c31e37e9f4d5b37d0c6876011b3492ba3619088e459ed8572669d96bd411eb260000003b5a3f96d22ed91c00d715b359610b8021d9a4ce23e89273704cb8e0afe3c87dadd39bda4a43e866f2f161427cdbaff0f7382c9417bd73f92198235f9b214db6e4682d9d1e76cc5d2de30c3a8a33a94f2c9a1e673ab05e99b0fc125854c94dd24d10151c06efe97d5b126566289df476b04dcb5eece75a7cec62efa1f18ed29f4899890e2f71575add5c382f528cd964f536c628ba0a4a82211bf0198bdf53d6b8c0fe8ae40722ac6b3558ff607535c0641d149ec16de347899696c13c778ac424f34b91b7531bb9cfb4277e20fbc6fb17ec735f9fa3d52cee66ddf79a83b901dbb5831fb8c9942c8a84034ca24a7cfa5bd55558dab5af49d6e2aa00ad262a5377a24c4bfb0c88f500e65377e85b28611dd415b9853d3b48283d289c3bb01bb92a5d2537a14fc31b1108e00000000000000000d89b8530d755b8522e3f33fc715059d4426529677f8101b18bbf986c6a92af1a9f6e9876ee54ab05b4392e529d9763f6f38893d839a022beb1fd19c6acd12f7a04ea7a9258365c144691030f958a8b9625e54937f72af9f7286f35cb5639a5ea99de1d77a9d0ad4780ef2259ce90ad44329400"/840], 0x18}}, 0x0) close(r1) 22:52:12 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x418800, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) sync_file_range(r4, 0x6, 0x7, 0x2) 22:52:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000001d0000280012000c00010076657468"], 0x48}}, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe583, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1be54cd8", @ANYRES16=r5, @ANYBLOB="04002dbd7000ffdbdf25050000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRESDEC=r6, @ANYBLOB="10002bbd7000fddbdf25020000000c00060005000000000000000c00020000000000000000003c00078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYRESDEC=r4, @ANYRES16, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0c0002000080000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x404c010}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5865, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x74, 0x0, 0x3, r4}}, 0x20}}, 0x0) [ 982.032678][ C0] sd 0:0:1:0: [sg0] tag#4289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 982.043356][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB: Test Unit Ready [ 982.049993][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.060029][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.069997][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.079954][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.089959][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.099879][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.109805][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.119711][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="1593000000000000000001"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180012}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x627a}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x24000080) socket$key(0xf, 0x3, 0x2) close(r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$SIOCSIFHWADDR(r0, 0x400454d0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) [ 982.129643][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.139576][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.149697][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.159671][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.170160][ C0] sd 0:0:1:0: [sg0] tag#4289 CDB[c0]: 00 00 00 00 00 00 00 00 [ 982.178935][ T5314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 982.224129][ T5315] usb usb9: usbfs: process 5315 (syz-executor.5) did not claim interface 0 before use [ 982.273672][ T5324] bridge0: port 3(veth61) entered blocking state [ 982.280301][ T5324] bridge0: port 3(veth61) entered disabled state [ 982.290323][ T5324] device veth61 entered promiscuous mode [ 982.298121][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 982.341651][ T5337] device veth61 left promiscuous mode [ 982.347409][ T5337] bridge0: port 3(veth61) entered disabled state [ 982.375789][ T383] tipc: TX() has been purged, node left! [ 982.697884][ T5335] tap0: tun_chr_ioctl cmd 1074025680 [ 982.792990][ T5315] usb usb9: usbfs: process 5315 (syz-executor.5) did not claim interface 0 before use [ 982.810341][ C0] sd 0:0:1:0: [sg0] tag#4290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 982.821093][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB: Test Unit Ready [ 982.827827][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.837718][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.847669][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.857916][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.867815][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.877699][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.887564][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.897427][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.907298][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.917165][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.917290][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.936768][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 982.946644][ C0] sd 0:0:1:0: [sg0] tag#4290 CDB[c0]: 00 00 00 00 00 00 00 00 [ 982.956639][ T5324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 983.138324][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:14 executing program 3: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000100)={0x1, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0xb391, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000140)={0x3, 'veth1_to_hsr\x00', {0x800}, 0x5}) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') [ 983.190802][ T5335] tap0: tun_chr_ioctl cmd 1074025680 22:52:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) 22:52:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000240)={0x5, @output={0x0, 0x0, {0x1, 0x7}, 0x1, 0x5d4}}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x121) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000002230047fa2bd28d22cb3e299c188aa14185fd16ffdfff000000000004000002040010", @ANYRESOCT=r1], 0x18}}, 0x0) close(r0) 22:52:14 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x2, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0xee00}, 0xc) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) 22:52:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x2, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, r5]) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000080)={0xa0, 0x0, 0x7, {{0x1, 0x2, 0x7, 0x5, 0x7, 0x100, {0x0, 0x6, 0x9, 0x3, 0x80, 0x8, 0x7, 0x3ff, 0x13c3, 0x5, 0x64, r4, r5, 0xff, 0x7fff}}, {0x0, 0x10}}}, 0xa0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:14 executing program 2: r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='S\x00'], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8041}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)="31a8a74c68e0576d9cd0c4741a0f6839f84fc6baa465a3f1153fbe538f25a929d282536660351a3581028e66de385e10e131124fe3f5ba72073e2d3c3f96cfb6d13ca9b9c6d5a0fee2b32c81839ef87b1843cf32bb270e925b79761d84da87242cd3d95cf159acc29f558ec395850eaaaa90", 0x72}, {&(0x7f00000006c0)="16e906bebf476698295db6acf67f1f30261b27de219dcc9db629f717d2dea16b033df50b8c4f8f2554b0e6e4aec54204c9d6c9015daa2cf2941c5183696021ec1644", 0x42}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9", 0x69}, {&(0x7f0000000ac0)}], 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xb8, 0x28000}], 0x2, 0x50) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @remote}, 0x4, 0x3, 0x2, 0x2}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="f4331100002b2c25fe8000000000000005baa68754ba00e8c1344f3e62d76c27e8000041020000003380", 0x2a}, {&(0x7f0000000340)="adf55e255613df190e05255a3914c42d56eca767bdaf49f3e09b304e78212aca1cd608a4c864c9a23590d06969c588bbe0aa3635b557f9e17ca361ac6483e0f9eb95a2c0277837fc25107f015fa37070ea571421b3527f031a28ac4f25839f0af62dfd00d55a7a19023c6dda3a5f128e78562fc41652bb0760bd2028", 0x7c}], 0x2}, 0x20000084) [ 983.744599][ C1] sd 0:0:1:0: [sg0] tag#4291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 983.755258][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB: Test Unit Ready [ 983.761972][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.771961][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.781848][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.791795][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.801702][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.811646][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.821538][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.831448][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:14 executing program 1: r0 = socket(0xf, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x1}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200000000000000010000000800020000000000", 0x24) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r5) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f00000001c0)) close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r6 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x10000, 0x4001) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)=r6) [ 983.841374][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.851280][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.861174][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.871177][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 983.881025][ C1] sd 0:0:1:0: [sg0] tag#4291 CDB[c0]: 00 00 00 00 00 00 00 00 [ 983.946957][ T5424] usb usb9: usbfs: process 5424 (syz-executor.5) did not claim interface 0 before use 22:52:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400004024000b0f3b229cedff05000000000000000100", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b00010074617072696f0000000000000000000000000000000000000000bd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a6006f145f00000000000000000000000000000008000a00000000005f781750cc7e989da43d7a095101366b5593705d24dbb580f5f5eb2ef6b45031f34ebc729b15938069016d89938a86e00ed973a0b5df58dcb5241aec6affa9ac4640072c4796a78239dd77612c030b9734fede2ae5db5189f80a595bad4e6cd63c1333240ecf715abf61b37c5d23e62672"], 0x94}}, 0x0) 22:52:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000200)}], 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3e8, 0x0, 0x0, 0x25dfdbfa, "", ["", ""]}, 0x10}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xa516}, 0x8) 22:52:15 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0x6, 0x200, 0xfe00, 0x1, 0x401, 0x7}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050021000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 984.312886][ T5440] usb usb9: usbfs: process 5440 (syz-executor.5) did not claim interface 0 before use 22:52:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3d, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000000)={0xa, 0x3a55, 0x8}) [ 984.540957][ C1] sd 0:0:1:0: [sg0] tag#4294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 984.551711][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB: Test Unit Ready [ 984.558459][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.568326][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.578164][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.588011][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.597859][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.607686][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.617519][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.627356][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.637231][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.647066][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.657160][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.666996][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.676822][ C1] sd 0:0:1:0: [sg0] tag#4294 CDB[c0]: 00 00 00 00 00 00 00 00 [ 984.713873][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0e0000008e00660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f0114240f01c40f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x7, 0xfffffffffffffeff, 0x1, 0x809, 0x488, 0x169f, 0x3, 0x95e9, 0x40, 0x7e, 0xffffffffffff1e08, 0x0, 0xfffffffffffffffa, 0x10000, 0x101], 0x2000, 0x10000}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000140)={0x0, 0xff, 0x81, 0x2, 0xffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:52:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x58, 0x1406, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40) [ 984.897370][ T5481] kvm [5480]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0 [ 984.996296][ T5495] usb usb9: usbfs: process 5495 (syz-executor.5) did not claim interface 0 before use [ 985.190032][ T5495] usb usb9: usbfs: process 5495 (syz-executor.5) did not claim interface 0 before use [ 985.234574][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x39}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0e0000008e00660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f0114240f01c40f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x7, 0xfffffffffffffeff, 0x1, 0x809, 0x488, 0x169f, 0x3, 0x95e9, 0x40, 0x7e, 0xffffffffffff1e08, 0x0, 0xfffffffffffffffa, 0x10000, 0x101], 0x2000, 0x10000}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000140)={0x0, 0xff, 0x81, 0x2, 0xffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:52:17 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x4040, 0x42) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r4, 0x1, 0x427, r6}) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98"], 0x14f) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080), 0x4) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000040)="d353ff022d68b2e4dc14aa5f7e25908384") 22:52:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000980)={0x5, 0x0, [], {0x0, @bt={0x3, 0xab3858e5, 0x0, 0x2, 0x0, 0x9, 0x2, 0x20, 0xffffff01, 0x9d6, 0x4, 0x0, 0x6, 0x3800, 0x2, 0x10, {0x8, 0x7fff}, 0x0, 0x7f}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) write$6lowpan_control(r4, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) close(r1) 22:52:17 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001300)={r4, 0x2, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x5, @random="f31f2cb56d6c"}, 0x10) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 22:52:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x1, 0x31, 0xffffffffffffffff, 0x10000000) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000d12ffc)=0x5d) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 986.686714][ T5538] device lo entered promiscuous mode [ 986.696345][ T5539] sg_write: data in/out 1717986882/247 bytes for SCSI command 0x0-- guessing data in; [ 986.696345][ T5539] program syz-executor.4 not setting count and/or reply_len properly [ 986.739583][ T5544] usb usb9: usbfs: process 5544 (syz-executor.5) did not claim interface 0 before use [ 986.824945][ T5554] usb usb9: usbfs: process 5554 (syz-executor.5) did not claim interface 0 before use [ 986.890797][ T5536] kvm [5531]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0 [ 986.955635][ C0] sd 0:0:1:0: [sg0] tag#4295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 986.966322][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB: Test Unit Ready [ 986.972955][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 986.982865][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 986.992901][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.002849][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.014019][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.024064][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.033972][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x258080, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0xc8b}, 0xf) syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x80, 0xb, 0x0, 0x1, 0x204c, 0xf68, 0x0}) [ 987.044390][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.057521][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.067622][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.078162][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.088152][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.098037][ C0] sd 0:0:1:0: [sg0] tag#4295 CDB[c0]: 00 00 00 00 00 00 00 00 [ 987.147550][ T5535] device lo left promiscuous mode 22:52:18 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 987.258082][ T5538] device lo entered promiscuous mode 22:52:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$setopts(0x4200, r1, 0x6, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f7f8054617cbed5f80004000015", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 987.430109][ T5535] device lo left promiscuous mode [ 987.461008][ T5539] sg_write: data in/out 1717986882/247 bytes for SCSI command 0x0-- guessing data in; [ 987.461008][ T5539] program syz-executor.4 not setting count and/or reply_len properly [ 987.478704][ C0] sd 0:0:1:0: [sg0] tag#4300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 987.489545][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB: Test Unit Ready [ 987.496261][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.496365][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.496490][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x4b, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="240000001a0007031dfffd946f6105311c0000040000000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)) socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_flowlabel\x00') ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r5) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, &(0x7f0000000300)={0x0, &(0x7f0000000240)="43243583b8b6ef2b14d6eb95d71fa1a3ad81a6153e4a19201b3ca22fa732b6ca7431be9b31cced63b6693122e77c0fee17da8fd67648a9363fc04196888d92f61e71b3895fa4fa87cbcdb2a176a748ec96b4bbc8b013eceb4f4002fce6acbaeb0a7a9d2b705582ec68fbd0240a120e137b143cbaef9852250d9377882051e51f77e117afe82dbd7e6af70a426a40d506e0168dbbdcab2299d925902afb7680c1e0c9b1b24959", 0xa6}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x10, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4804) [ 987.525704][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.535543][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.545378][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.555226][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.565100][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.574983][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.584829][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.595038][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.604912][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 987.614812][ C0] sd 0:0:1:0: [sg0] tag#4300 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:18 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00$\x00\a', @ANYBLOB], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ftruncate(r0, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) epoll_create(0x56) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x1, 0x3, 0x4, 0xafe9, 0x9}) mremap(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x3000, 0x2, &(0x7f0000ff1000/0x3000)=nil) [ 987.759823][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:52:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe880000000000000000000000000001fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff00000000330000007f000001000000000000db9c20d8a72b0d1100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000a000000000000fe040000004c001400636d6163286165732900"/244], 0x13c}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='/dev/net/tun\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0xffff) 22:52:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f000012afe4)={0xa, 0x4e22, 0x5c, @loopback}, 0x1c) listen(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x280, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r3}) sendto$inet6(r2, 0x0, 0x0, 0x5ba6ad296cf0a834, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r5, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0xb60, 0x10000, 0x800, 0x1400000, 0x1d, 0x800, 0xf2, 0x4, 0xc5ce, 0x808, 0xa, 0x8, 0x8f7f, 0x101, 0xf3, 0x2, 0x1ff, 0x80000001, 0x1000, 0x2, 0xe7, 0x404, 0x200, 0x8000, 0x6, 0x3, 0x9, 0xff, 0x1, 0x8, 0xa4fb, 0x7]}) close(r3) [ 988.371707][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:52:19 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x110, 0xffffffffffffffff, 0x7ff) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) close(r1) 22:52:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0}) [ 988.532374][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 988.629199][ C0] sd 0:0:1:0: [sg0] tag#4301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 988.639975][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB: Test Unit Ready [ 988.646740][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.656618][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.666646][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.676996][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.686936][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.696862][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.706765][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.706918][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.726383][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.736317][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.746245][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.756122][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 988.766035][ C0] sd 0:0:1:0: [sg0] tag#4301 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x0, 0x20) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/rt_cache\x00') setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x4, 0x448, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f00000000c0), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x4, 0x88b5, 'vxcan1\x00', 'bridge_slave_1\x00', 'ip6tnl0\x00', 'wg1\x00', @empty, [], @random="f611ec5d912c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xd6, 0x126, [], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x69d, {0x6}}}}}, {0x9, 0x0, 0x88a2, 'nr0\x00', 'bond_slave_0\x00', 'team_slave_0\x00', 'nr0\x00', @dev={[], 0x39}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @random="f3ae52de0688", [0x0, 0x80b9dd0f21ca9c73, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"490b9428a50b0cc2ec6473d0041d3bb6e0575be7faa045ec6c0d0912bd4b"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x11, 0x8, 0xa02, 'ipvlan1\x00', 'bond_slave_1\x00', 'veth1_macvtap\x00', 'veth0_vlan\x00', @random="8faf20efaff7", [0x0, 0xff, 0x0, 0xff], @random="7359deb65bc6", [0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}}, {0x5, 0x50, 0x10, 'batadv0\x00', 'wg1\x00', 'netpci0\x00', 'sit0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xee, 0x136, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, {0x6}}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}], @common=@ERROR={'ERROR\x00', 0x20, {"13ff1d012e2cd054f01909c8bcac7f98105398388dfe1de0e13e3540ed4d"}}}]}]}, 0x4c0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) [ 988.791962][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:52:19 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x0) r4 = dup2(r0, r3) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10a00, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xdc) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000140)={{0x8, 0x6}, 0x1}, 0x10) read$char_usb(r5, &(0x7f0000000180)=""/187, 0xbb) r7 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4b0, 0x3, 0x348, 0x0, 0x0, 0x218, 0x218, 0x218, 0x2b0, 0x2b0, 0x2b0, 0x2b0, 0x2b0, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, '\x00', 'ipvlan1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4=@remote}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv4=@multicast1}, {@ipv4=@remote, [], @ipv4=@broadcast}], 0x2}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@local, @local, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 22:52:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0c0000000800000052000000b9000000458e66db790c4fd7b7e2afdba5d35e05a09b9815c292513ea069642e0c985ada5cfc2faf8240c9f9329ba64e3baa90a99f6d3f2197100cebc21f29f60843dfb05bc85006bcf8c41048e5148195c8cdc5733d10d2f8e76581d91da88a941df8636836b8e3113ab0aeae44f952a9e8d7f513ff343240d863bd5293ad498ccde0611ec2b24021b63600a7f13b23a19d5b908bc6538a0bfc8861239a52a580e2b71612a7a609bfe0da3ef176ea5877fa83439c6aa377180657f1d4"]}) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) [ 989.165813][ C0] sd 0:0:1:0: [sg0] tag#4302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 989.176506][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB: Test Unit Ready [ 989.184504][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.194579][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.204537][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.214657][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.224618][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.234510][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.244394][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.254294][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.264183][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.264352][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.284609][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.294490][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.304387][ C0] sd 0:0:1:0: [sg0] tag#4302 CDB[c0]: 00 00 00 00 00 00 00 00 [ 989.355147][ C1] sd 0:0:1:0: [sg0] tag#4303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 989.365838][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB: Test Unit Ready [ 989.372465][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.382402][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.392286][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.404667][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.414563][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.425072][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.434968][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.444863][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.454702][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.464552][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.474425][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.484276][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.494116][ C1] sd 0:0:1:0: [sg0] tag#4303 CDB[c0]: 00 00 00 00 00 00 00 00 [ 989.514291][ C1] sd 0:0:1:0: [sg0] tag#4304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 989.524994][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB: Test Unit Ready [ 989.531611][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.541500][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.551346][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.561195][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.571032][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.580895][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.591090][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.600965][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.610813][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.620661][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.630509][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.640355][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 989.650178][ C1] sd 0:0:1:0: [sg0] tag#4304 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:21 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000700)="c4f01c74eaf89ec190fe92e32c7e66d69d99ef938953c154fba03b3d346679d8a194edab3fdd447990a33bc18ecf0f588ee253ff2b041041b9c0983db6f5a00f00c492c923a07b005bc92dd0cbcc32df8d389c3e49d765276b15ba4aea1efa04c428b316f9d6fd8aa84f2c5d26322e03ea593bb1b49f66efe913b49f94fd8f855e928e457a52080632980c9595544b2d4fc9df982ed3c427510432210bf659218a427f51c36d9f8e6a1008a235d950d56701e096173e99e434857add729a774d55769c438b3aba540b856c5e8355966a42fcc0bc1ac130a0509aa60a5fed4d88cd91f5673075efbef4fc0542835096915fb7a9fe", &(0x7f0000000800)=""/255, 0x4}, 0x20) close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, 0x0, 0x300, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x1c, 0x17, {0x0, 0x100, @l2={'', 0x3a, 'bridge_slave_1\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x128, 0x280, 0x0, 0x0, 0x0, 0x218, 0x350, 0x350, 0x218, 0x350, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 22:52:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001600c34632218ce2dbda00000000"], 0x20}}, 0x0) 22:52:21 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x5, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040), 0x2) socket(0x25, 0x5, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xed) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x199) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x0, 'wrr\x00'}, 0x2c) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000020) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000200)={0x9, 0x9, 0xb7, 0x305}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="68cac8dc7d669ffadfcc0a8e110e619932fefdb960ae7237cc3b6a6ccf018b8063125b671d575f2cb40ba90a2c620da950f1e1b2957e4e31acdfdd8bbd3c85b589640a4a605106f54ede9f8d77fbe6e9ed01219aa73c6c00afb80248c354077ba9df2be89185af2a77c5bff3586bb653375be0d4794c49aa154056cf4f576ac47b7abe8b2d178837a3d9cc3698e420369efe9a8784acc2", 0x97}], 0x1}, 0x4000) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'netdevsim0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='vboxnet0cpuset@cpusetselinux\x89)\\vboxnet1\x00') clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 22:52:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x60, 0x26, 0x0, 0xfffd, 0x0, 0x0, 0x0}) 22:52:21 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) close(r1) [ 990.482069][ C1] sd 0:0:1:0: [sg0] tag#4315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 990.492721][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB: Test Unit Ready [ 990.499444][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.509286][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.519398][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.529289][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.539322][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.549176][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.559015][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.561514][ C0] sd 0:0:1:0: [sg0] tag#4316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 990.568912][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.579391][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB: Test Unit Ready [ 990.589199][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.596114][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.606019][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.615794][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.625533][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.635220][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.644916][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.654607][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.664299][ C1] sd 0:0:1:0: [sg0] tag#4315 CDB[c0]: 00 00 00 00 00 00 00 00 [ 990.673993][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.691547][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.701466][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.711385][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.721284][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.731190][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.731300][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 990.741236][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.741334][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.772305][ C0] sd 0:0:1:0: [sg0] tag#4316 CDB[c0]: 00 00 00 00 00 00 00 00 [ 990.823950][ T5731] IPVS: ftp: loaded support on port[0] = 21 22:52:21 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x4844) timer_create(0x7, &(0x7f0000000180)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000080)="c9ee26042d1a73aba3f93d9c8c1df7", &(0x7f0000000100)="27f0957a50ddc2fb02d1b9"}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r5+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) msgget$private(0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x39) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) getsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000040)={@empty, @initdev, @multicast2}, &(0x7f0000000080)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 22:52:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7f}}]}, 0x2c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:52:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYRESOCT=r4], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2020400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x810) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0xbce, 0x5, 0x0}) [ 991.289927][ C1] sd 0:0:1:0: [sg0] tag#4317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 991.300697][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB: Test Unit Ready [ 991.307491][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.317431][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.327331][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.337191][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.347157][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.357111][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.367283][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.377159][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.387024][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.396890][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.406838][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.416712][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.419713][ T5781] usb usb9: usbfs: process 5781 (syz-executor.5) did not claim interface 0 before use [ 991.426550][ C1] sd 0:0:1:0: [sg0] tag#4317 CDB[c0]: 00 00 00 00 00 00 00 00 [ 991.444428][ T5781] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0000 i0000 l3022 [ 991.460022][ C0] sd 0:0:1:0: [sg0] tag#4318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 991.465942][ T5737] IPVS: ftp: loaded support on port[0] = 21 [ 991.471240][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB: Test Unit Ready [ 991.483732][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.493677][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.499964][ T5760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 991.503775][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.522887][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.532800][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.542811][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.552714][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.562617][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.572532][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.582400][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.592328][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.602237][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 991.612183][ C0] sd 0:0:1:0: [sg0] tag#4318 CDB[c0]: 00 00 00 00 00 00 00 00 [ 991.649679][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 991.740889][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:22 executing program 2: uselib(&(0x7f0000000000)='./file0\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f000085b000/0x4000)=nil, 0x4000, 0xa) mbind(&(0x7f0000405000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x21, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x7bf9}]}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x18, &(0x7f00000001c0)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x0, 0x74e921b322ee5d9d, 0x8000, 0x8, 0xf1cd, 0x9, 0x7fffffff, r2}, &(0x7f0000000080)=0x20) [ 991.902269][ T21] tipc: TX() has been purged, node left! 22:52:23 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) 22:52:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x543, 0x72]}, 0x8) 22:52:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') r1 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x226082, 0x0) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="10002602000000dbdf254c000000640084800a000500aaaaaaaaaaaa0000140006800800030009000000080003000300000004000680200001008281636c3c6e512cac688feaf46c25fe6a31cdf40c9f650b5bcc4ff608000200040000001400e880080003004c05000008000000020000000a00f500aaaaaaaaaaaa0000"], 0x84}, 0x1, 0x0, 0x0, 0x24048045}, 0xadc98a40883e165) sendfile(r2, r0, &(0x7f0000000400)=0x6059, 0x4) close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x101000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) [ 992.510072][ T5876] usb usb9: usbfs: process 5876 (syz-executor.5) did not claim interface 0 before use [ 992.574244][ T5876] usb usb9: usbfs: process 5876 (syz-executor.5) did not claim interface 0 before use [ 992.594883][ C1] sd 0:0:1:0: [sg0] tag#4319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 992.605653][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB: Test Unit Ready [ 992.612276][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.622350][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.632245][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.643169][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.652901][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.664099][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.673993][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.683897][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.694569][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.704493][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.714433][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.734044][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.743924][ C1] sd 0:0:1:0: [sg0] tag#4319 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0}) [ 993.241633][ T5901] usb usb9: usbfs: process 5901 (syz-executor.5) did not claim interface 4 before use [ 993.355654][ C0] sd 0:0:1:0: [sg0] tag#4320 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 993.366407][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB: Test Unit Ready [ 993.373205][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.383594][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.393464][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.403586][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.413440][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.423304][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.433199][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.442965][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.452836][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.462735][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.472617][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.482627][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.492531][ C0] sd 0:0:1:0: [sg0] tag#4320 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r8) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r8, 0x110, 0x3) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffdfffbbbbbbbbbfbbc100000086dd60"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 22:52:25 executing program 4: socket$inet6(0xa, 0x2, 0x4) socket$kcm(0x29, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x2, 0x354, [0x20000980, 0x0, 0x0, 0x20000b5e, 0x20000ca4], 0x0, &(0x7f0000000140), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x55, 0xf7, 'ip6gre0\x00', 'wg1\x00', 'netpci0\x00', 'team0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x10e, 0x176, 0x1ae, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x6, 0x7, 0xffb0, {0x1}}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x4, 0x8848, 0x9, @local, 0xff, @private=0xa010100, 0xffffff00, @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x38, 0x4}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10}}}}]}, {0x0, '\x00', 0x1, 0x7ffffffffffffffe, 0x1, [{0x9, 0x0, 0xbac5, 'veth0_to_hsr\x00', 'wg0\x00', 'ip6gretap0\x00', 'vxcan1\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff], @random="7fb22ef4861e", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xde, 0x116, [], [@snat={'snat\x00', 0x10, {{@link_local, 0x10}}}, @snat={'snat\x00', 0x10, {{@local, 0x10}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x3cc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r1) 22:52:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000240)=0xfd) close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="440f20c066350d000000440f22c02e0f302e0f7959000f00173e650f0866b9df0800000f320f06670f01ca65660f380440000f2027", 0x35}], 0x1, 0x1, &(0x7f00000001c0)=[@dstype0, @dstype3={0x7, 0xa}], 0x2) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000080)) 22:52:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0400003a3fa2a5eb51e401001adcdf0000"], 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x0) 22:52:25 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x129000, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 994.936089][ C1] sd 0:0:1:0: [sg0] tag#4321 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 994.946885][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB: Test Unit Ready [ 994.953680][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 994.963616][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 994.973580][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 994.984260][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 994.994168][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.004718][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.014637][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.024581][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.034500][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.044402][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.054309][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.064193][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.074066][ C1] sd 0:0:1:0: [sg0] tag#4321 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:26 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) clone(0x1918ffd, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 995.589789][ T5956] binder: 5950:5956 ioctl c018620b 20000240 returned -14 [ 995.698877][ C1] sd 0:0:1:0: [sg0] tag#4328 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 995.709649][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB: Test Unit Ready [ 995.716408][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.726252][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.736090][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.745938][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.755780][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.765635][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.775491][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.785337][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.795289][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.805116][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.805245][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.825618][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 995.835542][ C1] sd 0:0:1:0: [sg0] tag#4328 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$setperm(0x5, r1, 0x80004) close(r0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000340)={0x0, @reserved}) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000014000702000200000000000002ff0006"], 0xfd79}}, 0x0) read(r0, &(0x7f0000000280)=""/131, 0x3) 22:52:27 executing program 0: r0 = gettid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) tkill(r0, 0x16) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e33, @empty}}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r3+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) sendto$l2tp6(r2, &(0x7f0000000240)="b3d74382fa6baab6e5d723034633868c8e2669c8902647bcac970b21d72d9c6d2be59224273cea80279f884d54f347fa279506925fffa3d0191153c67048abbcf551ce0254436264b137fed873576d0daedf10343aa1b6fad34f9c32363689a844f4d7a491b534037ff263530eba0ead58ff283473d61ff54aa30f919a042060c6653446272924b61f9fa0fd7af7d727af4547a32a5ab8a16a6b4fd2dac3d3e45070182099bce55d44c2be1b5725d072b6666bb5370f1a64eb30b3e1fd25a7d5bb027942366c6a30aa426250f12254884e6ef46d3e536fce44a835bfa806c0043940a376a5e81f16c531af81c5", 0xed, 0x2000c880, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x204000071, 0xffffffffffffffff, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 22:52:27 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1, 0x3, 0x80000001}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x6821b309, 0x4, 0x101, 0x1}) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x6, 0xfffc, 0xfc1d, 0x500, 0x7, 0x4500000, r3}) r4 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x0, 0x400401) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000300)=0x3b) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000380)=0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000440)={0x9e0000, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x9a0921, 0x100, [], @p_u16=&(0x7f00000003c0)=0x1}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000480)=[0xfffff800, 0xab, 0x200, 0xb3, 0x0, 0x2, 0x400, 0x741f], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x2c, 0xcccccccc}) syz_open_dev$amidi(&(0x7f0000000580)='/dev/amidi#\x00', 0x1, 0x200000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x50, r7, 0x10000) r8 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="6eeb198348bf50006b75ce7c553fc6b4b38e8704ea09ec22182d586638e4fe15aadddddbcb9472c863687b50cb0bd2172daa076c1e916cb7f87615590d5a6aba0448b4640bb873f238827d4030be5ddbd7fddd7fba425fb559a51dd26cfdf78274d8965cb2a878cbe9e48ff8f97d588c7635b897365b751b787de335c741cb7c39f59f9d3afd42db84895f33706159f6bf141ef1b319abb35239e0e08ce8f213e8772e976f3ecd46eb164be6e5dd726297ebab8e965ae3", 0xb7, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f0000000740)='/proc/consoles\x00', &(0x7f0000000780)) 22:52:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000480)=""/4096, 0x1000) getdents(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) fchdir(r0) [ 996.748335][ T6007] usb usb9: usbfs: process 6007 (syz-executor.5) did not claim interface 0 before use 22:52:27 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x381500, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @bt={0x0, 0x3, 0x1, 0x3, 0x6, 0x9, 0x40, 0xffffffff, 0x0, 0x0, 0x1, 0x400, 0xe702, 0x6, 0x1d, 0x10, {0x5, 0x5}, 0xc7, 0xc1}}}) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x121) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x2}, &(0x7f0000000100)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000080)=0xc) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000002c0)={0x18}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/840], 0x18}}, 0x0) close(r2) [ 996.800714][ T6010] usb usb9: usbfs: process 6010 (syz-executor.5) did not claim interface 0 before use [ 996.947190][ C1] sd 0:0:1:0: [sg0] tag#4329 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 996.957913][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB: Test Unit Ready [ 996.964675][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 996.974509][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 996.984351][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 996.994236][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.004090][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.013917][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.023764][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.033610][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.043446][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.053290][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.063157][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.072936][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.082778][ C1] sd 0:0:1:0: [sg0] tag#4329 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:27 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x60001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000000c0)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000180)="26f2a6bad104b000ee660fd4065300baf80c66b876a8e98366efbafc0cb000eef2df2e04000f1ad70f01c50f01c2ba6100ed66b8000000000f23d00f21f86635300000030f23f8", 0x47}], 0x1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x40, 0x24, 0xb5, 0x80000002, "75043daf3c1d24b71f685575b9051540024aac1fab3726b600"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=""/107, &(0x7f0000000200)=""/105, &(0x7f0000000900)=""/4090, 0x4000}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) r6 = dup2(0xffffffffffffffff, r5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:52:28 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) socket(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = dup2(0xffffffffffffffff, r4) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40085}, 0x2c000000) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 997.256028][ T6027] usb usb9: usbfs: process 6027 (syz-executor.5) did not claim interface 0 before use [ 997.690372][ C1] sd 0:0:1:0: [sg0] tag#4330 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 997.701173][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB: Test Unit Ready [ 997.707868][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.717760][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.727770][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.737653][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.747501][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.757349][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.767923][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.777741][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.787568][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.797399][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.807240][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.817077][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 997.826910][ C1] sd 0:0:1:0: [sg0] tag#4330 CDB[c0]: 00 00 00 00 00 00 00 00 [ 997.886679][ T6066] usb usb9: usbfs: process 6066 (syz-executor.5) did not claim interface 0 before use 22:52:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x3, 0x10001, 0xfffffffb}}, 0x30) 22:52:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x10000000, 0x734, 0xa}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@delchain={0x138, 0x28, 0xf35, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_police={0x100, 0x0, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0xd1, 0x6, "01f10ac91f87d5ec52cbc6c5c87d4a1f0bb2e132f87ab312a6e0321fbaad91993a82f523c0c14537092b43d9ff58e4a5ba4cd1af63dfaddfbfb06b9e329f22e6c82b8e44e12d834209deab8e8915a077ed1b984537bf71e72f7681461c30590b3f60f5632a29fd14bb980649db56b1cd5d318cfb275c324cc3a4a02e09e5e0bce09962a671726fb95485a3b2dd38e4b5f9f0c6a2b98de5edfb6367b30673c2a2f91469b4ec0f7c759b52cc3b09b41e197464008e8a2800818af26a0d9095ff61632c715d95bb19bf093ac334d3"}, {0xc}, {0xc}}}]}]}}]}, 0x138}}, 0x0) [ 998.170130][ T6087] usb usb9: usbfs: process 6087 (syz-executor.5) did not claim interface 0 before use [ 998.406316][ T6087] usb usb9: usbfs: process 6087 (syz-executor.5) did not claim interface 0 before use 22:52:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)) r4 = dup(r0) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0xc4) [ 998.475810][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000b40)={@void, @void, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}, 0x58) [ 998.660195][ T6112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000380)={0x2, &(0x7f0000000180)=""/25, &(0x7f0000000340)=[{0x40, 0xca, 0x40, &(0x7f0000000240)=""/202}, {0x1, 0x0, 0x43, &(0x7f00000001c0)}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r5) mq_timedreceive(r5, &(0x7f00000003c0)=""/247, 0xf7, 0x3, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x1, 0x7, 0x40, 0x5, 0x1, 0x3f, 0x80, 0xaf, 0xff, 0x8, 0x9, 0x9}, 0xe) [ 999.006153][ T6133] vhci_hcd: vhci_hub_control:628: default hub control req: 0000 v0400 i0000 l0 22:52:30 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000100005070a00000002936e0600000000", @ANYRES32, @ANYBLOB="00000002000000001c0012800b00010062726964676500000c00028008001500000000000a0001000080c2000000000008000a00", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x2, r1, 0x0) quotactl(0x401, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)="9f9d06643aef501d6b239438b4eb0ab7588b2c306f1e710104fdc86969e4ba2892400d5469214c685d06438d15e79ad032b6356841679cdacd5c6413a9fb0eb684938deb4c79a0aed6e9adadbdde5387940867828a14a84c9ddef2edcba5ffbb7e08330c9977ae842f85c471aae95c59c7c739f55cd76bdeca68b6b8dcc02e69c66181142e9b4ae4085ca65a16301e8b15656618edba77e4e40b32d5879d7956c60fbf010e9edc342332d6d63f9e7dbe8fe06c4579791b") r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xe583, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8020800}, 0x8004) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x40000000000024a, 0x0) 22:52:30 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaa26b981aaaaaaaaaaaaaaaa000800450000280000000000069078000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9f16df8d9e806dda"], 0x0) [ 999.737795][ T6133] vhci_hcd: vhci_hub_control:628: default hub control req: 0000 v0400 i0000 l0 22:52:30 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x11}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x58, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_vlan\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 999.954692][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0xe8003) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:31 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x6240, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) write$P9_RLINK(r2, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x800}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[]) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') utimes(&(0x7f0000000440)='./file0\x00', 0x0) close(r0) [ 1000.132534][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:31 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xfffe, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000280)={0x1, 0x1, 0x40, [], &(0x7f0000000200)}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x18, &(0x7f00000001c0)={r7}, 0x8) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) write$rfkill(r2, &(0x7f0000000180)={0x1ff, 0x3, 0x1, 0x1, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r7, 0x40000000, 0x20}, 0xc) 22:52:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x39c583, 0x81, 0xf}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)={0x98c, 0x4}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0}) 22:52:31 executing program 2: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)=ANY=[]) write$binfmt_misc(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945ab8ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971ff7e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b049f3fce5d61c"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x1, 0x400}, {0x101, 0x5}]}, 0x14, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x10001, 0x8, 0x95db, 0xf5e}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x85f}], 0x1) write$capi20(r3, &(0x7f00000001c0)={0x10, 0x3ff, 0xff, 0x81, 0x7}, 0x10) 22:52:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') getsockopt$bt_hci(r2, 0x84, 0x22, &(0x7f00000000c0)=""/4071, &(0x7f0000000040)=0xfe7) 22:52:31 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4202]}, 0x45c) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x1000, 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4202]}, 0x45c) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000aa0e969800", @ANYRES16, @ANYBLOB="159300000000000000000144602c4f94836edd55782e20511df733668d0884b626308e198ee90e40075335f4381706a9422280b794f81eb22f032d7d6f6534460bc9fa99af7942ed47519cb2efa1fd0e07075e9dd91f749f4020f94e2e11c88968b323af05980ff3e033b6ac267fd6d447e5a996e00449b7b39473d41d677de063e5757d298c4dcb75114b31dd0eb3e21db3862689091752f62caf1d062a7ef276ac3b334bb05d1c0e67c6542fccca8ac576df80e9cbff1fc6f18845ee6dbe4b4daa635124c2096e1093e8f4ebaac9737c28d25e6fed2a09500b0519e3b311ad30112ffc967df04771d7858b215b0cfce1de04"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x45001}, 0x40) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x4, 0x4002) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000640)) r5 = socket(0x10, 0x803, 0x0) r6 = dup(r5) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0x5101, 0x0) dup2(r2, r3) [ 1000.707909][ T6201] usb usb9: usbfs: process 6201 (syz-executor.5) did not claim interface 0 before use [ 1000.719199][ T6201] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0000 i0000 l0 [ 1000.761095][ C0] sd 0:0:1:0: [sg0] tag#4335 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1000.771745][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB: Test Unit Ready [ 1000.778510][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.788450][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.798495][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.808408][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.818288][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.828173][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.838055][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.847916][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.857886][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.867766][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.877650][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.888044][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1000.897895][ C0] sd 0:0:1:0: [sg0] tag#4335 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x974a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="1593000000000000000001"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4048810) write(r0, &(0x7f00000000c0)="1c00000016009b8a14e5f407000000000a00"/28, 0x1c) 22:52:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4) [ 1001.247054][ T6218] usb usb9: usbfs: process 6218 (syz-executor.5) did not claim interface 0 before use [ 1001.257202][ T6218] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0000 i0000 l0 22:52:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, r4, 0x427, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x5}]}]}]}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}]}, 0x1c}}, 0x45) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) poll(&(0x7f0000000040)=[{r2, 0x8019}], 0x1, 0xed) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ad93}], 0x1, 0x0) [ 1001.290606][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[{0x10}, {0x10}, {0x10, 0x1}], 0x30}}], 0x2, 0x0) [ 1001.556630][ C0] sd 0:0:1:0: [sg0] tag#4336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1001.567408][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB: Test Unit Ready [ 1001.574370][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.584313][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.594189][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.604160][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.614038][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.623914][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.633839][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.643792][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.653762][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.663757][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.673689][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.683537][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1001.693974][ C0] sd 0:0:1:0: [sg0] tag#4336 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1001.768135][ T6232] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1001.782554][ T6218] usb usb9: usbfs: process 6218 (syz-executor.5) did not claim interface 0 before use [ 1001.792943][ T6218] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0000 i0000 l0 [ 1001.876525][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:32 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x391a03, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xc5) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x400, 0x140) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r1, 0x8000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) r2 = gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000002c0)={r1, r1, 0x9}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xd8, "2cbd14196b1533362b1566b6a739cce341d28e670a862050e03b0df646ab69ce7d7cab26caf20bcfc1d11fba856ce1dce0300e54130ba581604432ddede16e7417748396f4ee9dcd9539b95d6ca139f9142a33f820e6e3483f8aaec15d3750abe24853d71fafcb33ca77bca94c9a080258de17b27b3e18d13eee5e48bebd37e8eebe7a9b605361b83ea488cc77d053d303421654e16d47c03c5283a6a984de130d51cabb0c55661ee3af413e7a8d058f5cf77cd20ea523e4420f39cefdda66d33ae89148d9695311b3869083a98e38883bbcc486e8de9bb4"}, &(0x7f0000000400)=0xe0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)={r5, 0x7, 0x1b, "6f0e55caa64c91d5919d092c8b3b74909aa8451caf6e96e52fb101"}, 0x23) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f00000004c0)) mq_getsetattr(r0, &(0x7f0000000500)={0x3f, 0x2, 0x0, 0x100000001}, &(0x7f0000000540)) r7 = socket$inet(0x2, 0x80000, 0xfff00000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000580), &(0x7f00000005c0)=0x4) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000600)={'raw\x00'}, &(0x7f0000000680)=0x54) 22:52:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x3, 0x2a}) 22:52:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/108, 0x6c, 0x1, &(0x7f0000000140)={0x11, 0x4, r3, 0x1, 0x27, 0x6, @link_local}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x101, 0x3f000000}, 0x14}}, 0x0) 22:52:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}]}, 0x34}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x800) r4 = eventfd2(0x3, 0x2) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8) splice(r3, &(0x7f0000000100)=0x2, r4, &(0x7f00000001c0)=0x1000, 0x7, 0x8) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r7) 22:52:33 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/btrfs-control\x00', 0x4005, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001a40)=0xfa, 0x1) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x6e) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000002c00274ff4d802fe099cf05e270c3e0d", @ANYRES32=r5, @ANYBLOB="1d00000000000000030001000b000100666c6f7765720000040002"], 0x34}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1002.305044][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.328831][ T6270] usb usb9: usbfs: process 6270 (syz-executor.5) did not claim interface 0 before use 22:52:33 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000040)=""/137) mremap(&(0x7f00005d2000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f000016a000/0x3000)=nil) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)) mremap(&(0x7f000096e000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00007fa000/0x3000)=nil) [ 1002.624317][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1002.675222][ T6270] usb usb9: usbfs: process 6270 (syz-executor.5) did not claim interface 0 before use [ 1002.788295][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:33 executing program 3: ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = semget(0x0, 0x0, 0x41) semctl$IPC_INFO(r2, 0x1, 0x3, &(0x7f0000000040)=""/217) write$binfmt_misc(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="5300000044a6aeabc81eadf64017db9820000000510c56802745f84080f1e4b55eb40ca4000000d403ffff633b27e59aa146175dd106736d170001c7ec6e46000000000c5f345c28f38d926cb5d2a649d2e181bafe459c5c953948c6801d2c0945c08ba80000fc68537e82076538583def78b4fd80518bd8f6445555154de3d643decae65fd060839e786dfbe2156e8504aa94ce9a17993135f583a8a0f78e090d8a8fbefc5df07b2119cd755cf24d39283a7d3571baec4f5ec691b1037e97e818198423633faa0c8a27037989fe162fea71c80612196698f082f3ac383046a0247c8e91c3de58361cc8b26a744c21b7479a7011bf538a08733adcd07c702f33c783cae4133d7d12d3dbc70e77aaf23c1a1d24c4ea72d25f74c4627d0b8372f2ab3a049cdd016eb17e9846e370b03b5abd470a"], 0xab) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000002c0)=""/226) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000001400ff3a0000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000002d0f5f324698f00e9552683b278d4a68881376a85a986f8c6211016791e03263af77e9bd86625d18d9b22a0c685f5232f2f5129b49bbc3ade59615685e5347f24cc63dfc42127ca640eae5719d14180fdf8c11cb4898157ab287845869f2e58abba7e917d70ce3131042c509af1fdab9bc99f7923d610b8bc5223be55a26b17630582120b0fa2f9d99add747ecd61e8e7c1f1a3eb80141d3d9a2c8e94984b80fe466a34ab3998ef123aeb62730", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000000000000200000008001f00", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x4040801) 22:52:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) write$P9_RWRITE(r4, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x7}, 0xb) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) [ 1002.965726][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1003.115411][ T6310] usb usb9: usbfs: process 6310 (syz-executor.5) did not claim interface 0 before use 22:52:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x800}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x18, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e24, 0x1ff, @local, 0xd7}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={r7, 0x7}, 0x8) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000400), 0x0, &(0x7f0000000480)={0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000540), 0x0) [ 1003.306723][ T6310] usb usb9: usbfs: process 6310 (syz-executor.5) did not claim interface 0 before use 22:52:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r4) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f0000000080)="ea66069255630ce93ee17fb0c35af1b92cf2298caf86ee543c061946f9dba2025306574bd5957473cdcd88beeef5d431d32fc978b4f94a6ff48658ba14734e0b4bfccf56721dcbfdd69d587eb63eefb77b7f30301e74c247d95a08ec24ff8a9654071abfac1db9d26cad4acaa24c20", 0x6f}) 22:52:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() shmctl$IPC_RMID(0x0, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000000)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000340)={{0x4, 0x2, 0x3370, 0xffffffbe, '\x00', 0x40}, 0x0, [0x8, 0x1f, 0x3, 0x6, 0x31, 0x1, 0x1000, 0x9, 0x1, 0x1, 0x3, 0x0, 0x1, 0x20000000000000, 0x803, 0x8, 0x5, 0x3, 0x28, 0x5, 0xffff, 0x8, 0x4, 0x8001, 0x800, 0x8000, 0x3, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x80000001, 0x2, 0x101, 0x3ff, 0x80000001, 0x7, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x79d7, 0x92c, 0x6, 0xbec, 0xd7, 0x6, 0x1, 0x7, 0x800, 0xb, 0x8, 0x8, 0x0, 0x800, 0x7, 0x2, 0x6, 0x2, 0x7, 0x20000000000000, 0x3, 0x6, 0x4, 0x7fff, 0x9, 0x2, 0x2, 0x5, 0x9, 0x7, 0x4, 0x2, 0x100, 0x3, 0x40, 0x3, 0x3, 0x3, 0x3, 0x1, 0x4, 0x3, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 0x1, 0x80000000, 0xb2f2, 0x3, 0x6, 0x4, 0x73, 0xbe, 0x6, 0x0, 0xcf6, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x2, 0xb1, 0x1, 0x8, 0x80000001, 0x2, 0x81, 0x2, 0xffffffffffffffff, 0x6, 0x2, 0x4, 0x4e3, 0x80000000, 0x1cf, 0x702, 0x1, 0x0, 0xfe64, 0x0, 0x5, 0xfc, 0x2, 0x6b1b, 0x100000001]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000180)) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1a0}}, 0x4000090) read(0xffffffffffffffff, 0x0, 0x0) [ 1003.737683][ T6331] usb usb9: usbfs: process 6331 (syz-executor.5) did not claim interface 0 before use 22:52:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "84441ab43e"}]}, @timestamp_addr={0x44, 0x54, 0x39, 0x1, 0x3, [{@rand_addr=0x64010100, 0x2}, {@empty, 0xee5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@broadcast, 0x9}, {@broadcast, 0x8cc6}, {@broadcast, 0x4}, {@private=0xa010101, 0x81}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x401}]}, @lsrr={0x83, 0x3, 0x3e}]}}}], 0x78}}], 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x44000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x18, &(0x7f00000001c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={r7, 0x7, 0x30, 0xff, 0x2}, &(0x7f0000000200)=0x18) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000180)=0x92) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 1004.047415][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1004.077843][ C0] sd 0:0:1:0: [sg0] tag#4337 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1004.089057][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB: Test Unit Ready [ 1004.095802][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.105649][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.115556][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.125480][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.135822][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.137698][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1004.146128][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.157893][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1004.163415][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.180582][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.190454][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.200304][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.210162][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.220004][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.229846][ C0] sd 0:0:1:0: [sg0] tag#4337 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:35 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$KDADDIO(r5, 0x4b34, 0x59a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="89c927bd7fb9adabebf67f3e16dda4a11d659c7e5855089a2ce0d3ccfbfa499032fa55a401798893d9779336842bbf07c413a3db729b7d6bf8e4ddad4b44fce6797dc92853ce80ac531f", @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="980000002c00370d000000ff0000000000000000290908c76aa4b11ce96c6623468826b3b9694659f33957fa5cb30286ee81591a4a8d8a6368a8512aa65a3ae95b3f4df419c1024a3e96d506b3ff7717dc4f9a17365c09dc63a78562340664bd638a3fd95b065757a5bd4a5153345d8a7e6e1983194d2ec0131e3dd7e0455c3b8df98d940abc36a38441ab0811d607a9b2f2efedda73871ee0da7311687e392edeb1e1661d79b33b4568812184", @ANYRES32=r3, @ANYBLOB="00000000000000000d0000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c000280080005007f00000008000000000000000000000000000000040006000c00070000000000000000000c0008"], 0x98}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1004.864106][ C0] sd 0:0:1:0: [sg0] tag#4338 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1004.874954][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB: Test Unit Ready [ 1004.881662][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.891721][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.901700][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.911640][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.921538][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.931429][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1004.939004][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.939468][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1004.948853][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.956840][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1004.965949][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.983165][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1004.993830][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.003713][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.014552][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1005.024464][ C0] sd 0:0:1:0: [sg0] tag#4338 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1005.037437][ T6331] usb usb9: usbfs: process 6331 (syz-executor.5) did not claim interface 0 before use [ 1005.111460][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:36 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x44040) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x48810) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000080}, 0x4008890) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r6+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1005.191628][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:36 executing program 2: capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x840, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7fffffff, 0x50242) 22:52:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) sendmmsg$alg(r1, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000180)="07bbec7d6a2f5a788cd36a8e47673c2ba4571cd0b362927c56df8b41076aa8b76b6f938815c583d0048172f1e2864c3a3885a736843f1d9ceded03b0221c33d4c2b7a347708e6ebdf04a8fa93a7eac207d794ddce8fef66b902e16279c7e74c106838f030215cb6ac615ec80dfb63a99e0422a4f6ef0e7ca333c2e6a4741720de35241aee469fcdde7fc7dad56877c07e58d590c1d4221119d791fccfaeb5ee97b0702d44c2a838e905120b9863007d8e934f30fccb3fdc96e24932cabcfbd8894bbf2ba5f086467ae32a45bc38164786146085e4454a5220be4707768e8cae6e34d583c120c95ea7fc8e9a694ebb12c76f13d899096affe1e3a7075e6a451fad51c1452c0075fdf73b46874d21dd0167998deae418c372598ea99ad1898691e08b71b55f08485222b8e9390190a05878df5bedf69070367ee72dd52156f49049aec0843c3e1efbc913baa97ee74ddb0449b9800ccee6c25f545c7bcbb7d5f066d9f8c0a6c4ea4a5814f062605793569f39c8477cfbfd3e5cdfd04a1951e6c9c7dff2a43c2d5e8a76df2f4096ead0c8a29f8046c9f1a929c34f036276289a931e6e29bddf4310f5528faecf350b8ec878d782cafc85bbe8899ef2ce0f58ddad6fb3bf7423dc4f91c1bd509dcb3202ac8d33965a26671d05759e076d29483bd187498f7ed021c5f26ab27e495cb4b6cc70eb7da8a624a241ef073636d8db14dfe2c443685435121f6661afd0deecc900fd97a454a8f39657aec6cb6e0677a9b57d86816262dbdb8d0a3c814b5ed643beae8af88fdce84009cdaccadd18562a2f3e59102c1106c09f8d016be1c5ee029d3da9670aa28758b733039f6372d8982e56c3019032f2667f9f860d30e24f8a9035e8970406cfecbfb840c900e91ae31a0d887259a3d5390d76740efe728e159a4222536af82e071d59571a31625a181ce42cc3f75fb0dd783e7c49a70a50eaa27ab34bf84dceb9c9f833e228871c579f30b1d7b2ec594c6849e866f0c962f26ba19258a6632248f2d58493f501e252d0d1a14e74a0b624fb854d68ecc59108aa2a5cda5142f232dfd9fcaf4df802934e8cf108c27b5e5d9b56f112ce99e9589363220530339401b901af946a8ddac5525cacc35a553f3a114ad91c87961ccf3fc9ee1c75b7ad3dfc4b4133f7c9db84a1f3840eb9a0a646f7f65c47242bd368e19e5231b9258c06b2833418ca4c1afdafeefefe830b28854fe2798aec854fe9ffb7d4ade5a90674cffe3920deca68e17b1bb79df60c5f121f689189caa189736bf9697668ea240ba7e4a4492045671e6f3912b68fa90719c03103f08918a0351c669dacc0b646833cdc8ae8056ed041517c7383e2bd381901def89652802a72e6d8f90944bee987a9382a327042b03cca4b943684c3b1accfd204c53adfd2ab056051f8187649eff84a88afdf0560242718541ab9a463f7856f88cbd44976db1c260fbc05482736e72a49cf22177786b8471296291c7325c366523d6fac90774285e306f9b17244afaf424635cfd1ee4679595cec978dafa8aec98a90bc80a8059d712cb4de52f8260f3c832fff30a35ba5d1ca85ee479b6d143304f7b7151bfb479353a786a1802416add781543f055786494700c184837efc8f847fb50e278ff604477ade4c58efcc337e9220cba8a1b51985877fbab398b950861f1e48045c18a01d5906f1ce4cd3d0677351b0ce9bdf682ddfc32cb622c2d9cbca54e970874a13778ab2a9e7c15298097f6d7344707f4b52ad19e7e6fe1d3718a50e684a8eec9f0f3eb2dadef616ec363784f7ff8f22245957d953c21e64843faa2fe002aeea545c68785e2defb941b142f0a1061bcdfdc2a85e848f80df814a889519d3284aafb9095b5575fb580a573f420f7148f3d467b7afe66dc9fd183f1bd6c87c18a353baafeeda5d79a54e1782934fcf34f6a633a8033bee4f2721fb2d0957d4167dab11fe29f0009d1cb8ad92c27c6768a80afda8e6b0b2cb0d23357dae136ecf45a2cf0eae0f70deb030774e5b49b02b0404bde82115445f3c03579a6589ad3703e6c2bb03766d36ccc21ad22a1be7e34b173328818c31a0c66ebcfcc33bb086708d5dd6d637ecb45bf3b8863336548c4ee80973d9d4c95062dc62ab08d0df4dd9e5b44cc1258fdb9266676e1c2cd77391931ea845dc9b000a17655ed7ca04561ccef50f9e6c809ea95c999e8a71418f127e4709a081600ce85f94417d6387ef14c7327181d62dc7ab02019d38c1d42ecc71348cbb081547f02d353711fd04d1aafbfcddf18feea8429cf7348c0aff946cbe1d5f03d66fbd02612260f97e5bf544b2ab8bdf3a130898e644129490002b3913d42e714fb376ff5a284a2339cefd4bbef4bf2b2b60621d5358f54f8c59e828a29f668c5da82fa84ac133cf034f4d9c30b99c4b294b438bcf3356cb18d54318ce7cb102aed37169d1b9c1e736073f86aebeb9da01b0485eade0112bc89346dfc79e2f5b69b6e933e0737d946ac65a908662d7c032b48583d17e8366b18294576f7d23f774ce392c287585b61078e023aefc259a04297ee0719ac70f9655e3ce4aaec83c448f43786516ee880b088b9289f8f9b38852b2a4e1df01b4b1e4072a67745c5978d44b0ec3b700057340b0bdcbbff7578a0e3c243654ba2f117c2705f443d621b39e433c824717249ea9d9f8b92695bd31c6290eb3b423020f8a19e3075b0a006ebaf299e37ee93c77c84acaf21d3f83f74b1b7156897a499482c2d1a366a49588e55d7a5c6f3fcdcba4fd4bd3427e30e9d74d7dbfdd64739e4845e3dfd8bcc82968626586ec4cae9f3f52fe2acc96a1034bf03a07648c4e5e9ebf4a7457a57a9cdccd7b841b9e249a97e8e99ec64c2edc487719bb2eceb74485da5f5e7e83fd0491f098eb7be41d13f8968b2a2a809a54bb9b0b46fa9f91ae03c40756d77db1dbb4efdd9d7e5df2c02cc6712c1175001908eb4720fb5a24ec9747639c0dd2ce7ce8b59f078ce7e293ffcdecdea43571e95476a16631c32cdcf6d253dc63f5c3f29a185399852c74237798f60b03e232b24237afc610d198661dbc483fc2c7171d4eae789305219689ee9ee12588ecd03e2665f4ab80a7ab009694cc0f7ec837a93f4b38b68dab675e763dbede816824743137fa6180fb3acd6011bb5932565490a6d9bea010c6e2cf838cf88f5bb7f6db320158b9a980dcbeca6866d2493de6648a4b4a525197b61d5bea7e4f3372c0dafefa10d4896b2a8e72b08b88f55299c70be0c1eaeefdd20692220b08eab9ad38582dcfcc4236fcf2670164f7db2d2f7dd6256cc518e1c5a8dd8a62b600a18f6214038dcdbe9a269606fc8e0f4b6ceeb7023ccbbaae9fc4eb3727ddc663ce1582f26c970d9af3996528572d59f29bba3022809f16ebe7e3a5cd1a814ff20df9ed718a89ee5094c2da1745d394c33026c205caacc6b498dc90f1a0464129765f79cfe38057a4b9e37a8119065571d265b4892539abab862afbb144607bf6d65245d563819d60accce3758c3202a4b31bc2c76dba3188a589d49758dae1eeef982ab9a59d62c312c66ce9669443896c16b1cddbe4c792d5f8a509955a7411cd25317ffb91d3ccab2c48d02d8dd4e3c90bb638794680044736cf8bbe93de07364c611479909f5f528c1a4c75f1e3c5b2e315aacdb4ac18f0d62c45552c219e8c307b6e002cc14157305468180eca6b8b4e6c3f9f97a95be334be7ef08b544b6a49272e2be7fa7965d45ab596865c5a60d2b7838b5802e1a807820bb37147da9cf065cb2dc799a68d85e769c47168bda3d9aecd4f27f84c5354ef908861f519c3592fad4cfba810d97563e8654c4423f7f3383f5efb1d3f875de3387de7aa9af3cbba2b2a9b6b7ed86311de1510d461bad8fc5e38fd06c9e4d0348c6b8735e4d7656e0a6733db13211ba790ef889da905fce6c93248929459acb50bda8c1d20699a3d17c277757f4de69f39c594d93c5966648cb8b21f7f23f9a2869efc1f4d084d4cee22ead78b3f0496d14717c6245bc6e34ad319b15632220f9735054d9bbc9e1526f3876e3ce5af9094ac37755f84f0bab6a8627e5907649c4ed657324d3c564d66506421047661a76efa7980b6d5314517f006c6e85b6c767cc0af710607a93ae543579a49eeaa6e9360bb4c750a0ad69b37f2e07b7c265361dc8a821a4d15fdb25b0cd69262e96bdc2e97bd61f88a6b6c78f79a37e5c4bc9bc62bb002498ae5a4c66c9600c8ec863a55d7ea464523ee3aca417753527e303c6f5512d26ba84a76e8275d9b8ccee78a6ff05a761ba97b28b73df873ffc21d57d730b213f87fccda5989ed5c87c43dce02300dff962e2362517e12fb9a49a7e39a419bbf9e9f4bd80e4612bc4c076f2eb891a0c258db14baa864738d0513abffbc28f6a5cc768098d835ecd42caf1b763b789ea9a26e5be11bcb1a44359aa925ef10593284c660b6487c2f19854044c9dcbb3b0b48e28ec6bcd068784b45fd6602c880b6f33655ceb88f66296465a8ec7eb46523f92d43f8a9ff608b201aefc3bf8259d8a57568e6b7f93437bbd08e6b6096e60d58b9458d59f468b9c711686c6782d327ab2fb887446370f01c308a4322128610e5010e70fcd95e4e085ae839bbadb27746baff1c0253f7f4d939d7f4adc812b6ac1a65899ed063a0f07c6f7ffc550a2ddf4b46b8145f4ec1f963aa72941b64ba0730af1bc576b964aa6b0cbbb5bccaf1bb40495dfdccfcfb6ebc17bcf46eb356888afd84d51500078c8083dab5fe868837c6e58bee737794a8bca49b7849d20ca2a34fb2e17ada3670e1aae60248a90843ef862e58813a682ac4c47ecac85ca2a8e953296857fb431337c6e3c5ebf8434885c0b1b1845ba77ce217448dc8fcdc8de68128e869e5985b740cddf1cc5011b20e443770082c563ac0af9bfb34e1dec9603c114936523bac481f54b292d42263961fa5e17b08df2b7e8062e5e839a868f037a89e1b4bdc6c82bd5ae293289dba1fe641d897133ce866ee58e50812cc821d46270ee2cf642b3cabb48f2fd25fdc99ccc0966572d69a6c488e07a9b702b83aa7bfbfbe873496a5ff70ae442dbe34fcd575886b77825120a56283a0031025a98b039f75104f799ee8870217411efec301d5ac22b09cc6740ae3db10649221a2ff9cb9d6e76766b6048bdc3a6dda8c6f7da94cded7520abeafbd2600383f266751d7ac7b8cc4a1c2a86eb06677fb31e4b1517f8b14375a82668f8566be512e6d307916251160bb28d1c37d847ec9530e8f596ec53e023766ea38568065f2701dff50029a4c51e0d3f69ebc447766a53a26748d685fd78bf111ec0ffdae2d04f26ccc7659e3441518e4833b66af2ceebebee027f444a032056f2c0f47c711bafe18803149123347d82aadeb3ed0c831eaf40e20432a8b44a9a81c4b753d3b09222726b50f2f39e7f2c8b010eac1622260b1fc1330bea36510f92183245502bf436dd24ed6a97fed495a6100362759db24c58d679779f9895183964f14dded29645ca0b61fc3a10925f3f748e53e43ed686b03ec08a8e0cb0128989740f4750b2b8b4310064371cd076a6579e101f38f6fc55fa49976eb80c97facdd73bcf0763f7986768f92a0b7ee5d1c7e0beee61803f92eec9dc9ba1d6fc45a1d4f81116ca2c160d4390bbef3e25cfc810f88b9e1f64c57d13cf27726b552c15718f7105ff8538edc88bb631f52d4d7c80840f6b2d5a41e50d1f160363c6d625c28332d137fe7a74a0d8c90144ee360e85f69892fff3588985d9f5d03f76425d2c", 0x1000}, {&(0x7f0000001180)="87dfc4d44727ed6d3540e5abf2f9790d128c80891bdde4ab87865aea85a932a526a0950075f0d1b26226bebc4abb20f22a5854669521381e6cba24f6912f2a967214bd460370ba526350612c62174aa86f624f30628e66e0d51b3fba10fe7e67e85281ac2733d3f96ca71c6dcc4ff2961e09103ae8798a4a27279ee058d0127ad0a7354d4c4e8e07a794081c41e82bbc3880515b9271c6914c2d2383cd2ae1099079", 0xa2}, {&(0x7f0000001240)="405206021eba0948b2a0d80da5c0e4fab8b166da3af730cb94eaf2133dde8d36e01a449df241327df0429051149d319f0b005e575d25a3e76596f53f34eca336242bc99080fdae6caf1962b92c9467c881fc4070e8739e15e51d9972f5", 0x5d}], 0x3, &(0x7f0000001300)=[@op={0x18}, @iv={0xb8, 0x117, 0x2, 0xa4, "a33b2d44ee289a5945a0ac7e5401e585d5c9c833df54e628501f3639d0b9105477781e9114a31445c0f3f10955e7b339bcd7d0d3b25b68f8b956b5a01798d8e49eb34846b2f7c179ab2405ece415187f35c8ddcae1ce9f23562de60d611d4e662621a5730714b4b7116a2508ffc04fb21c7be6cdfb2efea580775ee0cd37a242cd6dc4c6287eafc4ebe72320e0f9fa6920bbc201028bb258cd8159f08ca1b1d6b268b88f"}, @iv={0xe0, 0x117, 0x2, 0xcc, "bbeb4d03188ba82e188f035390c2d6c14831d582dd80919640ebcde1ee68372824a49826dc98bf186e4cf8a587ea7c052bc9177f4428240662d6c61635d122b580d1c601c6d522d2a77ec5e48fd03ad7f883703b6540b08497a1833dfe3773075155be64583bbed29616a93ab37ddcf025107695dacbd181699440f62374c462053f5483fc10f57c948649af1d0c8944ed0ec238df3f646ca9d14ed7c42b3ce141ed8a952ce374c4a9be403a280a873ee966195a45d28f0711f943db694b6bea7d0701b46c674ba2f799cc47"}], 0x1b0, 0x4008000}, {0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)="0ea53f2261c41fde9fe31904c3c9d26c63dfd9836f811f7f3e4a73810d5c11b4c82b255133ed40beae57753046b1b0551a510a11eddf008fe4baab35f8747e0b26215da1fdbf3ad37cfca97c61e96653659d8924b58476b2ac3fbbe4b400009a093026d8450e76f15a64ac67acf23143df578f410280f6d3d7c82080df6a844856d3894fb43490a9ea4a755d707c198193977bdcc5a9e76b9a5b56996e3bc3d9a6fa4f50af7bfc266ecdf3006fb9e6ff897f2a0f18fa863108e404fabf622baee902dbb17352c6ea4e332153de7951c76bc0cc", 0xd3}, {&(0x7f00000015c0)="2d3af0993e8eea1968e5eb852951a5e084891397ae46b814dddac176babe32943b9d3e3b8426789f1a6fb85d5ce91d4e4a997acd213379f4c7e2a4e1589b8a597e75933ffab1dca76786b5aa92d045e92d44842b2e88998d92da91930df3f056436da4bbb8927eadd8d1", 0x6a}, {&(0x7f0000001640)="1ec6a5f16ab4edb96c85ab91faf2f41d8b9fa240b1315cc9e11ea3b6d4172bc607d37a6f5dd6cc1fb5de1d20bc5c0a32b18b9ddbf84a4bf04e1882a599fb6f98470dbd6b43d6f053c9aff7fa889be7956011fd66652cc7cb07", 0x59}], 0x3, 0x0, 0x0, 0xfad11867c5ff557f}], 0x2, 0x20000040) r2 = socket(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = memfd_create(&(0x7f0000001780)='/dev/net/tun\x00', 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000001840)={0xa30000, 0xd8000000, 0x1ff, r5, 0x0, &(0x7f0000001800)={0x980909, 0x0, [], @p_u16=&(0x7f00000017c0)=0x1be2}}) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x158}}, 0x0) 22:52:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$VT_RELDISP(r2, 0x5605) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 1005.872543][ T6392] usb usb9: usbfs: process 6392 (syz-executor.5) did not claim interface 0 before use 22:52:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000040)) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xa808) 22:52:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) r6 = dup3(r3, r5, 0x0) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000300)='gre0\x00') 22:52:37 executing program 4: perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000300)=0x6e) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x485, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1580}, {r0, 0x100}], 0x2, 0xffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000740)='batadv\x00') socket(0x1a, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 22:52:37 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x4, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:37 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x44040) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x48810) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000080}, 0x4008890) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r6+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x640001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x81, 0x14, 0x0, 0x2, 0x0, 0x7, 0x0}) 22:52:37 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000044a6aeabc8000000000000000000001045e1db9820000000000000d44dcf0e7db3fee0109003ffff633b27e5c9e4433fb61af504deb78c2fb6a8c48bcffe77cbc339"], 0x14f) r1 = syz_open_procfs(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000003c0)) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f00000001c0)) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, 0x0) 22:52:37 executing program 5: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000002000000071, 0x10d000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) 22:52:37 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/151, 0x97}], 0x1, 0x0, 0x0, 0x7301}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000194c0)="dafd689991cb7dbc6cf08536a602e597c52f161be22d8835f2e5e9021ec693b3ea2299e5aa3123c2dbceaa5938914f2dd3cad696a8319a6e96a61407a8fa1c1bec7abae1723a74cf3576030e29140b4bfeb8ca4894f74cef8e7134d64082c22e786477d18a47a34e9d6704a972fee5891b046ab5a0c2220e28342324bce007d5c3948d5bf39eae4855a69d1209a46d567af8cf6240702d35", 0x98}], 0x1}, 0x0) close(r0) 22:52:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000040)) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xa808) 22:52:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) r2 = epoll_create1(0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000140)) r3 = dup2(r2, r2) close(r2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0xc) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000180)=r6) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @dev}, r5}}, 0x38) 22:52:38 executing program 0: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x2, 0x0, @thr={&(0x7f00000002c0)="d3e9e21d7d695e197b3b83a9faa1706b65cf6026aa1d84dd407f25b70b520ecb0dee5f3a073ad8e62fe8d303ae225ac8140b650b8e2f2ee1eaad1faf33c5d91e067b642d7af16c3b6cda44a2bebef7a9cbf48941a42373", &(0x7f0000000340)="090a25f299cd2c8c723b6174096b626a02d861ce4f196e5667b53eacf0595caf6806083eec7d990641b0f26e6059712f4581b8b102711d91a8d16f09281e"}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r0+10000000}, &(0x7f00000000c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x20044841}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xc) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) tkill(r3, 0x10000018) 22:52:38 executing program 0: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r0+10000000}, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) bind$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={[], 0x12}, 0x63}, 0xa) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xaa, 0x40, 0x2, 0xec, 0x0, 0x7, 0x1, 0x2, 0x6, 0x8d, 0x5, 0x1f, 0x3, 0xc5}, 0xe) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x206021, 0x22) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x142, 0x22c5, 0x6, 0x2, 0x80, 0x3fffffff80, 0xffff, 0x100000001, 0xfff, 0x1, 0x3}) 22:52:38 executing program 3: getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}}}}, &(0x7f00000000c0)=0xb0) socket$inet(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20002, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/2645], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) 22:52:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01010000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@weak_handle, @fd={0x70742a85}, @flat=@weak_binder}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) [ 1007.767809][ T6501] binder: 6499:6501 unknown command 257 [ 1007.773874][ T6501] binder: 6499:6501 ioctl c0306201 20000280 returned -22 22:52:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x5f) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000040)) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xa808) [ 1007.859388][ T6501] binder: BINDER_SET_CONTEXT_MGR already set [ 1007.866595][ T6501] binder: 6499:6501 ioctl 40046207 0 returned -16 [ 1007.915107][ T6508] binder: BINDER_SET_CONTEXT_MGR already set [ 1007.921490][ T6508] binder: 6499:6508 ioctl 40046207 0 returned -16 [ 1007.961956][ T6506] binder: 6499:6506 unknown command 257 [ 1007.967986][ T6506] binder: 6499:6506 ioctl c0306201 20000280 returned -22 22:52:38 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x8200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x559240, 0x0) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400, 0x200, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x2000, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@hash='hash'}]}}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x9, 0x8, &(0x7f0000000140)="46139b7f7491395dda358b14a4cd5626047c97595aefde1453d3d52d093806d1fa5a3126cb876167808293844ee06f34e2e1ee6f2488d1873b08b3fa780607cc40ce3ef5371d977d0fea8db42c42d422bfa8d9f7facaaa874eb311fcdd3e547dc74fa6122c83dcdc24964bd01acb133ad423cc57c82616dd88a12b8d9d03996adfc97d2c3793e157cda1ebbec6b6f6ced128e0a243015b"}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r7) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r7) read(r3, &(0x7f0000000000)=""/41, 0x29) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 1008.076773][ T6514] usb usb9: usbfs: process 6514 (syz-executor.5) did not claim interface 0 before use [ 1008.310984][ T6514] usb usb9: usbfs: process 6514 (syz-executor.5) did not claim interface 0 before use 22:52:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000040)=0x56, 0xff11) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 22:52:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) recvmsg$kcm(r3, &(0x7f00000015c0)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/212, 0xd4}], 0x5, &(0x7f00000014c0)=""/207, 0xcf}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x20}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x68}}, 0x0) 22:52:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}}, 0x9c) 22:52:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e21, @local}}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x63) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)=ANY=[], 0x0) 22:52:39 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580), r5, 0x0, 0x2, 0x4}}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r6) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c040000f40300032bbd7000fddbdf2507000000000000002b000000ffffff7f02000000080000000200000002000000fbfffffffeffffff010000000101000000000000010100000104000001000000f900000004000000ff7f0000060000001f00000000000000090000000000000a050000002800000002000000d8603b4704000000090000000104000008000000010000000500000004000000010100000e350000fa0300000900000009000000ff0f0000000080008100000020000000080000000600000000000080faffffff060000000700000009000000ff7f0000ff030000f7ffffffab020000010000000900000001000000ffffffff0200000007000000018000000900000000000000250000000500000007000000040000000200000001000000030000000300000007000000001000000000000003000000ca030000f5000000f00000004000000005000000070000000900000001000000ad04000006000000360000002236000081000000030000001d0000000000000000000000800200000000000000080000090000000800000000000000ffffffff86e10000070000000000000000020000030000000200000004000000ff7f0000f9ffffff7f0000007f0000007f0000002f060000020000000000000004000000010001003e000000010000000300000002000000de040000ff070000060000007b5c0000020000000000000000020000060000000600000000040000008000000001000000000080ffffffff0200000004000000b40000000000fe01d5000000070000000800000038050000ff0100000100008000080000ffff00000100000000000000c8d600000000000008000000a3000000000000000100000005000000080000003f000000000100000900000026eb0000b8ffffffff03000009000000d408000000020000080000003f000000060000000900000000000000070000000700000001000000470600007400000005000000030000000300000006000000ec0000000800000000080000faffffffa40d00001f0000009400000006000000000000000100008005000000030000000600000000000000f19000000500000001000000070000000080000004000000c304000000000000104f000001000100040000000004000007000000060000000400000004000000000000000900000002000000010000000800000001000100ec2c00000700000000000080400000004000000008000000400000005b0000000100000040000000ffffffff0100000005000000090000000600000000000000f8eb000001000000c0ffffff01000000010001000500000005000000203900000004000000000040c600000040000000270d00000000008094000000010100000200000001040000f700000007000000010100000600000002000000040000000200000003000000010000001c00000000294026002f6465762f6275732f7573622f3030232f303023000000"], 0x43c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) [ 1008.898197][ T6560] usb usb9: usbfs: process 6560 (syz-executor.5) did not claim interface 0 before use [ 1009.035969][ T6560] usb usb9: usbfs: process 6560 (syz-executor.5) did not claim interface 0 before use 22:52:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x22081, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r6, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r7, r8/1000+60000}, {0x77359400}}) r9 = syz_open_procfs(r5, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r9, 0x0, 0xedc0) 22:52:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x268783) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000640)=r0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x81, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x4c}}, 0x84) [ 1009.540319][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:40 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="77f7795b28e5ea6094914a7d8178d98702807fd015fd32373a8b24d3e176e5a23a17ce833c6ce2c8046d76441e28c993e07f1141906770d39aafb3c460f9aa8e14cbb8f5ee3a13d30fbcad4e1ff9e8e1aca68ebcb5e9011a7e2f3db0f1e2b0a345e35d524313778f6ba5fda15c073b521940c097b9f8ac7f98b3b065c6cb93bc122eb85337869ffeaa86830a6808f444a74f31249c062d7ae86b668d58e821f8f75ebf0775d017262f8f7d97730e265c6dab9c2003beab03678b363c4b91e956bd4b45954cdc89b509a1af2a0b", 0xcd) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r4, 0x3}}, 0x10) 22:52:40 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x36, 0x0, @tid=r2}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1009.759920][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:52:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x8a801, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000480)={0x53c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4b8, 0x3, 0x0, 0x1, [{0x410, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "bfee4fd34d9872d5879bccf6c5b65f4180eb16e78f33702753d95bc88de07221c6ce07b3ae4d2b22c26239f731e6beb5a9e1d115f78878610f78c90ace965759bd3967ba6ecbb1b972b3ce5c2dc5eb7fabe769b2050933775b6ea33198e63a1dbb51cf3253d7b578d9705b91b3faba0898f040f8005549cc668e6cc72cf6a054ae7deb175a8a0942cc7622779163d94f3a821d5200268b1c8c8a09b68c06fb36de77d3319a402ae7098b9b473d817563fdc860282515d9b8ead429926c9ab92d688fd1a1f6d23feb91f617de0fe992e169a4cde15819eb16d026397a1b7c9a80c52aea"}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x100, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "b20451bc6671287f3d360adb046cd77bbb1a0d3812c52b753c39140fde166fcc59b2f7b5218736df9f0cc23acb0110b1c8ada8131a6101fb42bc94ef7df8242a3ce8a6c8fa4f5f8fc749cb302313d660df56824800973a13643f8a27212a8e539fb43ab1317b29b4484ecfd7e926af00acc34a2d9dd33b6700b702ac5ada8a2a9e200f45868d6da945bd4abf65e8a7b56cf065236c59ec2b65e253775c9287366987f2c586e5abbad7efe3e7b02c77003bad69f3b38105df50c39885451ef2844aee04f37eca8feabbc967"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x64, 0x1, "65a5f943f1569615ce1a3dd96a0f7dc924cfd1dc9644d7f29d97e5bd7fffdac461c0a1c738518257983ac0f255a2a200eabe7f4043652c3c75e378aba0184ceb064e8fb215bb25181273447fe1d21ab7f33f5bc89bfb829af224b1ace17ac765"}, @NFTA_DATA_VALUE={0x101, 0x1, "b160aebdf6851855147b311c9111437bbff62ac381778e8c356cf46bdbee164ee3246ebc13815c84dfc4ee675e83a1cd36abcedeb1b2830248bfe1a6c0a69a31930ce91060e3632f7272706e4f5ec0e0235a431ecfa89922e786af045038332879115eb579843744a90d8b6e0a87eb111333cb2433c98b40aa80cd421574cb4b1a152a341767deb48f3d90f87c2397c45700e7c56fd37c2a8b5deeb554f812bd8f07267aee1e9c98d6ad5d2e05226906304fffa243d04505c9aa32b3a072d26983c28394aec4cc6992bc2e058e8220513c9928be743b0dd23d23c614a862c7c5c2b9038a2ed59156c7465ea17f7f111b06c4012e3ff684328f80291bbe"}, @NFTA_DATA_VALUE={0xb, 0x1, "caa06cc6eeb3d9"}, @NFTA_DATA_VALUE={0x79, 0x1, "0d90761e895037100a350368fb311e06b68af83b744a2537a050cdf6671dabab3d601d93e74f6a024dd9134ef726cc6cfd59bea43f9109054b48571cb925e52558b5367863ff989de0a3ed9a2397ac8fb70c81f21e7b6be350855aea6c50f035d4d3ebe8df17a4478a309af8174f4435d0781c73d9"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x18e000000000000}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "ab072c5ec5ab80e61d3fdef495a4bcaa42d42519ff380da08b5477ed19c1ecd06cc61601028dd972248ed48f256283a5c742b773e0ff7abbbf091bff9c2b4e04ac77ff45af97cb35e37ca48d8c25c7e7e3b10dd9ea4436dbb62dec58e571d6a730d4de3f07a90601fcb350fbf755ddd598741ded88206ca0b3149a"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "722dfe7c55ac19"}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}]}]}]}, 0x53c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000340)=""/191) close(r3) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r3) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xd4, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0xd4}}, 0x400) 22:52:40 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000040)=0x7fff) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x1}], 0x1}, 0x4008060) 22:52:40 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x1b, 0x5d, 0x7, 0x7, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9}, {}]}, 0xb0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x2, 0x1, 0x1, 0x0, 0xff}, 0xfffffffffffff046, 0xd154}) 22:52:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x980000, 0x800, 0x400, r2, 0x0, &(0x7f0000000100)={0x990a78, 0x3, [], @value=0x6a00000}}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_iso={0x0, {0xc}, 0x7fff, 0x4, &(0x7f0000000180)="9183fcb52a55288b8d781cc3a3805e194baa3517cea0f86950179b890486afa65a7b9b2b5428d444e8d866cf98f9160bd73587a3e372a9dda0ea4453964e1a7f229f90b62df2922ac7a894fd3b4926e05b2559e938f4ce6f7b339c3ed0671fc348cc47681c78a99dc74f3ea7614492c84b64ef831b273c9044d4d2a1c264354e0ecf737233f9f91d4d700fab0c3d8705a251562acbbc09fb998e47c061fcd4cea59a4afabcc29efb7a2d946681ab0ce78d569f4dd3ff0c4ff84548b5be92b912c41eef60531255e9e9fa014523309fb06a471a59c7edec", 0xd7, 0x7, 0x6f63, 0x5d, 0x5, 0x80, &(0x7f0000000280)="1383b8f0e079e1f33ff63b651ca1b1c81a02226cef47ba2206f6e3e47acfea39c7c081ef5e26fe704f847976d1b4ff2e9c1bd63732c20d9307328b8753d2882018680d69f5af265d3f16b1f72ca493e5653e6ee668cb1c77e0e47c9e1a431ac0a7fb6e02f036bdacfaa8dac8632da57ba1744b70b16eef5089b7c5434c4de789f0a27eb5f32b9a256a3442d8ecfeb8ff23663ea0", [{0x7, 0x9, 0x6}, {0x7e76478b, 0xc0, 0xe6}, {0x6, 0x1}, {0x3, 0x80000000, 0x8}, {0xd6dc, 0x0, 0x5}, {0x7ff, 0x5, 0x6}, {0x6, 0xffffffff, 0xffffffc6}, {0x8, 0x65a, 0x58}, {0xfffffffb, 0x3368, 0xffff}, {0xb998, 0x1000, 0x5}, {0x80, 0xfffffc01, 0x100}, {0x1, 0xdf4, 0x7}, {0x3, 0x4, 0xffffffff}, {0x3f, 0x1, 0x1}, {0xb06, 0x5, 0x401}, {0x10001, 0x6, 0x401}, {0x7fffffff, 0x3f, 0xfffffffc}, {0x80000001, 0xfffff840, 0xfff}, {0x9, 0x1ff, 0x8}, {0x9, 0xfffff436, 0x2}, {0x7fff, 0x400, 0x1}, {0x998b, 0x0, 0x1}, {0x9, 0x9, 0x401}, {0x6, 0x5, 0x1}, {0x80000000, 0xfffffffd, 0x9}, {0x1, 0x4, 0x5}, {0x6, 0xffff0001, 0x2}, {0x1f, 0x800, 0xce}, {0x4ed, 0x395, 0xd7}, {0x4, 0x1, 0xffff}, {0x73, 0x0, 0x6}, {0xffffff36, 0x1, 0xc3a}, {0x1000, 0x5, 0x8}, {0x2, 0x401, 0x9807}, {0x9, 0x6, 0x4}, {0x1, 0x8, 0x7}, {0x8, 0x9, 0xee}, {0x7, 0x80, 0xfffffff9}, {0xff, 0x101, 0x3}, {0x4, 0x3, 0x4}, {0x2, 0x80000000, 0x40}, {0x6, 0x9, 0x80000000}, {0x7, 0x400, 0x8}, {0x93, 0x0, 0x9}, {0x20, 0x7, 0x9a2}, {0x1ff, 0x2, 0x10000}, {0x200, 0x8000, 0x7fff}, {0x20, 0x3, 0x4}, {0xffff, 0x80000000, 0x4}, {0x7, 0x1, 0x4}, {0x5, 0x4, 0x2}, {0x2, 0x5, 0x5}, {0xff, 0x8}, {0x1, 0x0, 0x8}, {0xffff, 0x4, 0x8}, {0xe25, 0x91, 0x5}, {0x4, 0xffffffff, 0x9}, {0x10000, 0x5, 0xfffffffa}, {0xffff, 0x80, 0x401}, {0x7fff, 0x80, 0x2}, {0x9, 0x9, 0xf430}, {0xffff9310, 0xfa11, 0x80000001}, {0xffffffff, 0x100, 0xfffffffe}, {0x20, 0x4, 0x811}, {0x10000, 0xff, 0x72b}, {0x4, 0x5, 0x10000}, {0x5, 0x9857, 0x7f}, {0x400, 0x376, 0x3ff}, {0x9, 0xffffffff, 0x3}, {0x4, 0x7, 0x8}, {0x1, 0x432, 0x5}, {0xff, 0x2, 0x7fffffff}, {0xfff, 0x7, 0x10000}, {0x4, 0x1, 0x3}, {0x7, 0x1302, 0x2}, {0x10001, 0x88d6, 0x20}, {0x2, 0x80000000, 0x81}, {0x7, 0x1, 0x3}, {0xfffffff7, 0x1, 0xfffffffa}, {0x0, 0x0, 0x4}, {0x7, 0x0, 0xc86}, {0x6, 0xfffffffe, 0x8}, {0xfe, 0x100, 0xffffffff}, {0x1, 0x24bb, 0x2}, {0x8001, 0x4, 0x32d}, {0x8, 0x401}, {0x20, 0x1, 0xa6e1}, {0x101, 0x8000}, {0x200, 0x101, 0x5}, {0x8001, 0x531, 0x4}, {0x3, 0xffff, 0x20000}, {0x80000000, 0x7, 0x7}, {0x2, 0xffff, 0x8000}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 22:52:41 executing program 0: r0 = gettid() timer_create(0x7, &(0x7f0000044000)={0x0, 0x1, 0x0, @thr={&(0x7f0000000340)="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", &(0x7f0000000180)="d11496e5db4a327dd5240bc299371ca83c2fcb"}}, &(0x7f0000044000)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x9) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) kcmp(r1, r0, 0x0, r2, r4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r5+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') close(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000100)=0x3) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0xcfab, 0x2, 0xff81, 0x8001}, 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300767863616e3100"/28], 0x34}}, 0x0) [ 1010.197358][ T6630] Dead loop on virtual device ip6_vti0, fix it urgently! 22:52:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x61, 0x11, 0x3, 0x4, 0x73, 0x9, &(0x7f0000000080)="ed7040ee86bc56877c970a873585b45cf3ed6dee5774ae7a3cf6b31daa36def9b41f363f95eb8b4451700c7cd4725c229468db24dc0b553903bea73509e6d433502b8ea557b9c1c837457b7559e16c50503be73b18bd098ae39ecd9a30fb31d8e24d9c51897773859e812a42ff37d777c30970"}) [ 1010.297981][ T6639] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (4) [ 1010.371384][ T6639] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (4) 22:52:41 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={r1, r2+60000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1010.422562][ T6649] Dead loop on virtual device ip6_vti0, fix it urgently! 22:52:41 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800112400000000f200000000fffff7000000", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="d01a0000000000fe81d5e4702a56212672c64d83fba144706deeab03db4c3b7a7702ae430695cded7ecb5e1d8e1189ff858170ec5036bdc1150b7990fcd0eddfd81bf34baae5a38bcb616373cbb3293764b3a8260a4e511ec5941bc841d1"], 0x2}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000bc0)={0x1, 'vlan0\x00', {}, 0xffff}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet6(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_DELSET={0x388, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_USERDATA={0xa4, 0xd, 0x1, 0x0, "a132a674027c5a2f51bbdc8b5b1ebe43f5ddd6e94f8ecc50c1cbf88de924c37996237d29589bb95350989c497a9051e664363091d12ce60f2f77e5db2e25f323efd517ea476afad41402a6dab3d0d674c3783369abfa7ab3a5b0fbe7070e36b90c1d6f27395c8b063c69096a2bae70db802ff18467767a419013593b4e053cbcbc03f51b651afb32ce242fb1391d33228585e7384b7f38301b6ccba5e7edec75"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x53}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0x294, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x77}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb1ba}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13e31b05}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x61b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff6d6f}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb85a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3662}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x224ee64e}]}]}, @NFTA_SET_DESC_CONCAT={0x98, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8558}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x92}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x3dc}}, 0xcc010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_HANDLE={0xc}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = shmget(0xffffffffffffffff, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000c00)=""/88) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000b80)) vmsplice(r3, &(0x7f0000000b00)=[{&(0x7f0000000080)="e887aba1a3945bf9d040cb2b5610aeaf9d45976868817766fa57ca7d950b4584ffc17bd21c09047e6c21643ba3667992b7d61387df07a4be06b2ca57e66226a7e63e978767dcabc750e33623b17eaaa0c6112f2c42860183810638a6c3f14dc5ada857d907984da43d1f46f579d463d2d36d7440fd858210ba05312856af7273eb08655d6f397774d660b889acb6a6453eff92fa9215f32bfc82afc59b1020f4bc636f83f8b38dbc4226b0786aeee8c7bc2f8f8aeb218ff18177de48597f183ff4fabc3a4f", 0xc5}, {&(0x7f0000000780)="0f1f72e0131319d5c1a08476274d1b6b9d3211922fa9ab5b870a6a88252677707ad67680dd90d9cad06a0d5f4ab547e7c0ff3cccd357b3f29a614688ac693aee2b37f0a4f18993c0cee9818e8000787bd9e61071580dbe912945712e5eba9560f3192fe0a579b8c183cb8e18a7e9083ce090fa47a2bd1548f2b1c62cad6fbfa43ddd96", 0x83}, {&(0x7f0000000840)="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", 0xfe}, {&(0x7f0000000940)="00b6eb25c9282b1ad25b0c20645175c4baa0c270e74acbede94cc0c442ce924bcd45134892a8284a819361938ab1fa9d58e9eaaff4e8b1c0ad3858032108bb962bc5424b64255a9e56ba3403da1b7884b4314fcc9afd3e1119fe08a6f1b03c73df44c8e160c1148ac7933a26153ea0906baa57e8fba2d7068938524388d129e493488a53bba1dcfd7190c20b8efd62df24d22e9a697f38fa6774dd60c41ef2c56ab789bc65b0f6c9cef76d8e129049e6806ed3ff458d26068d4a5ef7ee06ed041f8e6d8aa0401dcec5f25e1172e9f6a2", 0xd0}, {&(0x7f0000000a40)="60522c2ef093b7c375556f6ae247b1327358f713a6f35caffa8b14a0305c93d434787328f2e810761950ab8a12730d7980e0de6cbdd2b9fec24760793f6a62fc73d233631a46094bb011eee43592a42251f1e7c346c6cf5c321d4f8d237412b642a64c3d883d9bc242390369bc2124780357def1eea13d32a0a5df1d0389dd8c6ff8d4e5fedc3350533ed9ed919c8375053c8d164906b3eac6898de03cefbf6eef9244485021dd88e0db2f97c8ff488337953de3eefa51b5f4858c44", 0xbc}], 0x5, 0x2) [ 1010.529106][ T6654] usb usb9: usbfs: process 6654 (syz-executor.5) did not claim interface 0 before use 22:52:41 executing program 2: r0 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000031300290a000000000000001807000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00)\x00\x00\x00\x00\x00'], 0x28}}, 0x0) [ 1010.581038][ T6658] usb usb9: usbfs: process 6658 (syz-executor.5) did not claim interface 4 before use [ 1010.654783][ T6658] usb usb9: usbfs: process 6658 (syz-executor.5) did not claim interface 4 before use [ 1010.684925][ T6654] usb usb9: usbfs: process 6654 (syz-executor.5) did not claim interface 0 before use 22:52:41 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x10) readahead(r0, 0x480000000000, 0x1f) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x2a) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x131) openat$vcsu(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0xce, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 22:52:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000031990687000000200008020007000006"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) setsockopt$inet_buf(r4, 0x0, 0x25, &(0x7f0000000080)="dca62284ca00531f00f57206ef5112173ed39f4627435b7e1ccec2b34bd67026a95a082b590d3268f3eece3349db613d246f1f38a967b8", 0x37) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r5) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) close(r6) 22:52:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40100, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000001c0)={r5, &(0x7f00000000c0)=""/232}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000200)={r5, &(0x7f0000000400)=""/252}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f00000000c0)={r5, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000a80012000c09000000657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 1011.101688][ T32] audit: type=1800 audit(1593989561.950:36): pid=6673 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15762 res=0 22:52:42 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1003, 0x78141) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000300)={0x9b0000, 0x80000000, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0xcc, 0xfff, [], @string=&(0x7f0000000480)=0xf7}}) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000340)=0xffdffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={'vmac64(aes)\x00'}}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r0, 0xae, 0xee}, 0x0, &(0x7f00000000c0)="212585467fff876c2584d674480df6516bb48be130071f4a6674ac76cb4c93bbf319c755ab16ec1ceb3553ae26a021e3ead7d075a6e45f0edfbba20d1a64c7934d3ad6afd54ec2e4dce6c57de8fda6d21c68f97c44a07f668a832a5f3f9e1e6c31f3e181b75de3f1dfe99b9b4a6de18eacdeca59d3d8ff0ea585916998e8d590077ff9996a5cbbe405f668808e516306e3b06dd04077aaf0147cf7f93f8cf282f5d49c69116136b6e5d14f2f4df1", &(0x7f0000000180)="8428918a300d264c9a83fc2cfa950df6345dc9562e88448604952df6c613b96c05a13302e4415302b7bb19d88b2337cfe3a510263b362b185cca0c6954a6e5a21037176e3fea0d97e91898fdef17d019b1e07f324069a6ca50b47138787d1cce8565bb985ae8501aa10eb4fa2021507620c5371a2ef1e5cc92eb3237181ee8059197da61665ca815bf943fae3f2ce12ccb77cd257b0aba602fd2a3a8856edbcfbb554b57ed16ff86b95a5f539a7db2795f54872a90ec2813f7460fe6bd7f6bf7f8ec305e10048f749eeb81c9269897e77782de4f3255fe465f01f1e989a9ad2d6e256fd8fb03205bc1d29fd500a7") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) r6 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x400, 0xa) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) [ 1011.632412][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1011.696298][ T32] audit: type=1800 audit(1593989562.550:37): pid=6673 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15764 res=0 [ 1011.738544][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:42 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x3, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x60400, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x200, "9afee247f27466402055e79377b18221bd6fe6315bce9c08f0a65c843d177f58", 0x3}) 22:52:42 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000007c92d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274614ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e35bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994cc008dd3deaafaab51144c1ef00f00001f5e73ff040000000000000000000000000000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc2c"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0x0, r1, 0x0, 0x0}) unshare(0x40000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x10040804) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008091}, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\v'], 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) [ 1011.820509][ T32] audit: type=1800 audit(1593989562.620:38): pid=6672 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15762 res=0 22:52:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000280)="f30f0866b8f5ffffff0f23c80f21f866350c00a0000f23f80f32f2a714f001fc29fc2938298a0d000f01df0f73f38a0f8fc579790000", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xe0003}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40000000004cb, 0xffe, 0x0, 0x0, 0x4, 0x9, 0x7d9b, 0xfffffffffffffffb, 0xfffffffffffffff9, 0xfffffffffffffffd], 0x0, 0x20081}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='children\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$packet(0x11, 0x0, 0x300) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) [ 1011.972057][ C1] sd 0:0:1:0: [sg0] tag#4307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1011.983254][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB: Test Unit Ready [ 1011.991683][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.001726][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x212}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) socket$inet6(0xa, 0x3, 0x3c) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'syzkaller0\x00', 0x3}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)) r4 = dup3(r0, r3, 0x80000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x18, &(0x7f00000001c0)={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080)={r7, 0x4}, 0x8) [ 1012.011950][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.023882][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.033847][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.043723][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.054166][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.064338][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.074449][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.084295][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.094241][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.104410][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.114619][ C1] sd 0:0:1:0: [sg0] tag#4307 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000240)={0x4, 0xffff, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9e0903, 0x401, [], @value64=0x401}}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000140)={0x5, 0x0, [{}, {}, {}, {}, {}]}) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000080)) 22:52:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25130000000e0001006e657464657673696d0000000f0002006e6573696d300000080003000300000008000b009e14000006001100e1ff000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4810) r1 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e9864465", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) [ 1012.172095][ T6707] IPVS: ftp: loaded support on port[0] = 21 [ 1012.486511][ T6737] usb usb9: usbfs: process 6737 (syz-executor.5) did not claim interface 0 before use 22:52:43 executing program 0: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) wait4(r1, &(0x7f0000000080), 0x2, &(0x7f0000000180)) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r0+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) tkill(r2, 0x34) 22:52:43 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x5, 0xfd, r2, 0x0, &(0x7f0000000080)={0x9b0940, 0x2000000, [], @value=0x8e8}}) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) [ 1013.029111][ T6733] usb usb9: usbfs: process 6733 (syz-executor.5) did not claim interface 0 before use 22:52:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000c0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x10}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xfa5d6cf40eb69072}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000000080), 0x30, 0x0) 22:52:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000001c0)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={r4, 0x4}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r6, 0x365a5000) fallocate(r5, 0x0, 0x0, 0x808001) ioctl$FS_IOC_GETVERSION(r6, 0x40086604, &(0x7f0000000200)) 22:52:44 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x12, 0xffffffffffffffff, 0x25fda000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x3}, 0x8) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f00000000c0)=@assoc_value={r4}, &(0x7f0000002000)=0xfffffde9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x7b, 0x0, 0x8) r6 = dup2(r5, r5) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000140)={r4, 0x6, 0x5, 0x43d}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r1) 22:52:44 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='fd/4\x00') setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0xa1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:52:44 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x0, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x20000003, 0x7}}}, @common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0595c0ef8a42e1681c52a599943b9f8f033e74ab9ce28aede436cd2f3fbc3a03d976f1cb8fd234ded36ecd7f496b02d09e656b1143ec9563831bf050c9c1531fa2131c5ad4fd5590e611ddc86f36b139e030448087b0a74c9c1c39384ab02542529f918bd408c47ae528444cdbe57e6280909f0cf3ee900f29bc4d1d8e4b15ee", 0x50}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) [ 1014.339727][ C0] sd 0:0:1:0: [sg0] tag#4308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1014.351818][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB: Test Unit Ready [ 1014.359233][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.370426][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.381164][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.391586][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.402177][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.413110][ T6713] IPVS: ftp: loaded support on port[0] = 21 [ 1014.417475][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.438338][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.448990][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.459932][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.470639][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.481421][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.493183][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1014.507097][ C0] sd 0:0:1:0: [sg0] tag#4308 CDB[c0]: 00 00 00 00 00 00 00 00 22:52:45 executing program 4: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x200, 0x1) 22:52:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x94}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x526, 0x280) 22:52:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x7a05, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x565a0e0524ffe955) r2 = inotify_init() r3 = dup3(r1, r2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={r4, 0x0, 0x3, 0xab, 0x4, 0x47, 0x7fe00, 0x800, 0x9, 0xffff8001, 0x43e8, 0xf42}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fallocate(r0, 0x100000001, 0x0, 0x28120002) creat(&(0x7f0000000100)='./bus\x00', 0x40) 22:52:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xa, 0x171601) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x200000, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x406, r3) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 22:52:45 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) sendto$l2tp6(r3, &(0x7f0000000180)="0017efe89142e8f1c23b292185220657a8f56c6979518d8cbe71d7050ca2735f8eaa225526c4a8e1ba6ee0c3eab39501fe7d4550a6953878fbf6b9d5f459d8a76f3e0a89111ba1840baa255aa71032656283cbab574c14a6435a59bb3b89b860c74f426eac955655faa7e50586b1e67de6a86bb64ba7591a9f9d974c0a1000977f205b6060ddfa9257225210ebbc1f56d71752245ea2a95b6e149f008c5ceedce62f34a9e7879cde9cc9dee193e0b43a9faa122db706a35654e88e5c69a7932c2f459c826b177cf340aeaef8af", 0xcd, 0x20004010, &(0x7f0000000080)={0xa, 0x0, 0x5, @private1, 0x0, 0x2}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1014.985508][ T383] tipc: TX() has been purged, node left! 22:52:45 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000567000/0x2000)=nil) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) process_vm_writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/186, 0xba}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/182, 0xb6}], 0x5, &(0x7f0000000000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) write$cgroup_pid(r2, &(0x7f0000000480)=r0, 0x12) mremap(&(0x7f00008d0000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000700000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 22:52:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffee9, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e63, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VIDIOC_G_CROP(r2, 0xc01456b8, &(0x7f000000a240)={0x0, {0x14, 0x14, 0x30315559}}) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000040)={0x5, 0x8, 0x2, 0x0, 0xdb}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) shutdown(r5, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 22:52:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280270e00006970766c616e14000400028008002800000000006e16f689662295bfaaa180d7376dd73872e10ac4675e"], 0x3c}}, 0x0) 22:52:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7f, 0x408080) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x9, 0x5, 0x9}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000100)={@any, 0x200}) 22:52:46 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 1015.532799][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1015.580624][ T6869] usb usb9: usbfs: process 6869 (syz-executor.5) did not claim interface 0 before use [ 1015.702834][ T6869] usb usb9: usbfs: process 6869 (syz-executor.5) did not claim interface 0 before use 22:52:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68081) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000180)=0x262a, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) close(r8) 22:52:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) fchmod(r0, 0x1a0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2}, 0x2) 22:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b156af0600000098747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21013b8f6fa537aa2ca289bfcb", 0x7c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8514b6c1941614007af0dcf0099a2bcec"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) r4 = dup3(r3, r0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000000)={0xe, 0x1b, 0xa, 0xa, 0x6, 0x3, 0x2, 0x7d}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:52:46 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) setsockopt$inet6_buf(r2, 0x29, 0xca, &(0x7f0000000080)="d7185285a9c751aea2eb8504301ab2af1fe90c6a3b98fd88fb534b7967a0281c43612a912452a36cabeb8a0ccbfe98b37120dcf768d6332a4cda58a9", 0x3c) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r3+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:47 executing program 4: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000a80)='\\\xba\x140D\xf8systemem0md5sum$\x00`\xfa\x90$\x1f\x8c3\xa1\xa8k\x1e\xca9\xb2\xbb\b\x8f\x94>\xb8\x0f\x92r\xb4\\\xbd\xc0\xc0\xa5\xf8;|\x16\xad\xbcR\x0f\x00FVL/3w\x1d\x1dTRG\xd37z\xcbS\x82\x7f\xac;Be!\x84Q\xb7\xdc\xb6\xf0\xc6\x9e\xb0\xa6\xf4\x88Tj\b\x00\x00\x00\xc7\xd58\xfd\xb6\x00\x80\xf9\xd7?\xc0\x9a\x9b\xba\x0f\x01\x96\xa8\x0f\x11\x1c/~O\x92\xd8D\x90\xf7\x9aW\xf3\x19tH\\\x92\xb3\xe3\xff\xcb@\xd4\xd6%\xea\xe7)\x81\xdc\x91T\x85\x14\x84\xe4\xae\xe2\xd8\xf6S\xb5\xbb\x9d\xa9Ek\x1az\x7fa\x9cY\xd2zIU\xe4\b\xc6Q\x1a\xcbr\x191\x19\xd70\x17\xd9qD\xaa\x83\x1d\x9ei\x8c\x83\x9eVa$\xa1\x0eEP\x03\xee\xea\x9e\xce\xfac\xce9\xe8\r\x17\xf0\xf4\x89B[\xfc\xe3?\xbe\xc4\xc0{\x1e\xc5g\xc7\x12\xf6?\f\xdd\xec\xfc\x1c\xb3Xc\xc0\fPm~$M>A\x8a\xd6\x1d\xd8\xe4\xf1?\xea\x1a\x15\x13J\xe3\"\x87\x9b\x02\x7f\x13\tF', 0x3) r1 = memfd_create(&(0x7f0000000140)='$.6?%cpu\x85\x9d&\xf6\xe7', 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0040102167d484240523d16674640d7c2851d1350f7f5953c585041f5595cba3e294485e80550255f7124b92e7c63a27bec37be56210203dd428fbfdcde90bfbf21573c33b728bc57180607a304817a089432a11cf57f81a01bc57284e1e783363b3ad88824ac2f8f1cc73ea1381318282d7f873af3a126beaa5a88d3452f176c78e05c3226da845e1bb3481bcfd4bfdb9e22db90357dd15cf591a0ecf8611de8f4102a5a2de2bd9bac4b7c6607eb14c0c643e2550ef0f6a684673d0f3174d65dc4c291f108325dad5f2fc026447e7ca33bcd2a1971aab75baac33bc2910645c56ef"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000100)={0x9, 0x3f, 0x8001, 0x6, 0x2, 0x4}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xe) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000500)="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") ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000040)={&(0x7f0000000180)=""/210, 0xfffffffffffffffb}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4004001ff) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') 22:52:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000180)="a21603e42f88826ebfa7b624bc", 0xd, r1) r2 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000000c0), 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r2, r2}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000200)={&(0x7f0000000100)={'rmd256-generic\x00'}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r4) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000440)={0x5, 0x1, 0x427, 0x7, 0x8}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x40, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8d}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 22:52:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0}) 22:52:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000500000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00\x00\x00v'], 0x48}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x2000, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x7c, 0x2, [@TCA_BASIC_ACT={0x78, 0x3, [@m_skbmod={0x74, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xac}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:52:47 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x4428c5, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x40000000, 0x6, 0x22}) tkill(r0, 0x1000000000016) [ 1016.559904][ T6913] vhci_hcd: vhci_hub_control:628: default hub control req: 0000 v0000 i0000 l0 [ 1016.667625][ T6917] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1016.834811][ T6917] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 22:52:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x20, 0x2, 0xf8, 0x0, 0xc9, 0x2000, 0x6000, [], 0x3f}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r8) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r8) write$P9_RRENAMEAT(r3, &(0x7f0000000140)={0x65, 0x4b, 0x402}, 0x7) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x50, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087715082cf0400b0eb04000d001600117a0586f9835b3f2f009148790028f85acc7c45", 0x2e}], 0x1}, 0x0) 22:52:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r4, 0x69, "d33b60a6481036f2ca12812da1190eacd713e649067ae065a7ea7e32dd8afbd4c76b12a093a523abd19fab3ec51e221095248cb87a47437a659b15920f5ee4b1c30d531983416106abbf4b80fa8e0a7b16df9936c534bbc536d58cae5aa089365780cc37301db8b994"}, &(0x7f0000000000)=0x71) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x4a001) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) 22:52:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'batadv0\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'geneve1\x00', 0x2000}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="130030d1cd577df2e115b0e95a0d69b603f3c56b3294000000000000798ca7b0fb650890a40772a337d166266928731f46ed5bd6d45ee17f77e1ba583125d3c4901dbada51364af8a8664214ddae1b1324a860debd683503bfa3bf422e089efaca02e52990b49f3c84f1cc5b4645e8a1d28f689eee0de79a8e8420170fee088593316b700876a8a34c17e77dc3fb71ce394d9c7d2b3087cbc038c517bc84818eab61a5327b169805113b642e54"], 0x13) close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @empty}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff1}, {0xa, 0xffe0}, {0x1c, 0xfff2}}, [{0x8, 0xb, 0x7fff}]}, 0x2c}}, 0x845) 22:52:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000000)={0x2b, 0x3}) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002180)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x64, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast2}, @pad1, @pad1]}]}}}, 0x96) 22:52:48 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x30000, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000100)=0xff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r2+10000000}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1017.241085][ T6940] usb usb9: usbfs: process 6940 (syz-executor.5) did not claim interface 0 before use [ 1017.251702][ T6940] vhci_hcd: vhci_hub_control:628: default hub control req: a100 v0004 i0000 l0 22:52:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) sendto$inet6(r2, &(0x7f0000000600)="69037e5bc90ec1739b22298f0d7745480a16bd7945bc35623dac1efbf242804262620a21371c8c57516e1d37579ed0837ec053ab45740d2cbe5fbea21697e71b473529b7a3ddf0db8c94bc35fe65613c0855774c89d8b05337fbefdf23b208e0dc563cd4a71df065031ac932a2ff7132b4aae4971328fd199911af6be74f47e65129c512e2e3d5754a90d3afdb70f460f31770dd3890e7afa6407b3170b5aa6688805245c4c48c913f6f04a39fb6c220ebfe6a4e74798cee1efcc2e2ccd507e76bb6", 0xc2, 0x850, &(0x7f0000000700)={0xa, 0x4e22, 0xcc, @private1, 0x7}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40814}, 0x12000040) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0x2, 0xa, 0x110, &(0x7f0000000080)="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"}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0xb7) 22:52:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socket(0x10, 0x803, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) socket$inet(0x10, 0x2, 0x0) socket$inet(0x2, 0x80001, 0x0) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100766c616e000000003400028006000100030000000c0002000e0000000a0000001c0003800c00010001000000000000800c000100010000000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x74}}, 0x90) 22:52:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128008000100677265001000028006000e0038"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:52:49 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast2}}}, {{@in6=@local}, 0x0, @in6}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={@ipv4={[], [], @private=0xa010100}, @local, @remote, 0x0, 0x5, 0x1, 0x0, 0x0, 0x80}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="fce9e2820bc456dce317557a84415a52c3d72ae12961c237ee06eef67ba80d9bfe61cf27f4d67d373a8dfc85a4983ec6a9e0a982fb26f80438fff3d1377185a924cec63ca7eab5f9945f80abf9316ba5e144db1d54ef11662bedfb16d28c18b6a44483d637a98fed6b6236692c032dcd3dc5be67b115d0095c2537fbc74a09f091fd48b0b28500f84692e5e89de459166ebb579277b718c3f059a544fb5b9c954310d770cac6e04e51546d966ad496f7ad4e1bc494f5a1b1a8c2673f2e3212e6d73b9809731aa057b23383c0cc300328221275607d456d0bfc0f03b80878578cbe073f931e256fcd67d3951edbed3e1c", @ANYRESOCT=r1, @ANYRES64, @ANYBLOB="4217098a6dd93a4c3c4747b6736ee54c9c77053a140d0ffa99479163ae0c8433c6eba27ba3e207254b", @ANYRES64, @ANYRES16], 0xfea7) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x1ff) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7e) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000040)=""/19) [ 1018.492632][ C0] sd 0:0:1:0: [sg0] tag#4309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1018.503452][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB: Test Unit Ready [ 1018.510070][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.520024][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.529903][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.539826][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.549722][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.559601][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.569465][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.579405][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.589325][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.599252][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.609178][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.619077][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1018.629018][ C0] sd 0:0:1:0: [sg0] tag#4309 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1019.048898][ C0] sd 0:0:1:0: [sg0] tag#4310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1019.059929][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB: Test Unit Ready [ 1019.066789][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.066901][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.067009][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.067118][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.067227][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.067332][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.067452][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.140963][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.151062][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.162834][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.174209][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1019.184197][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:52:50 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf0}}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8929, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_flags=0x2}) sched_getparam(r0, &(0x7f0000000080)) [ 1019.194154][ C0] sd 0:0:1:0: [sg0] tag#4310 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1019.577657][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1019.631468][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5, 0x0, 0x3f}, {0x15, 0x0, 0x0, 0x10004}, {0x6}]}) 22:52:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) write$binfmt_elf32(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x40, 0x2, 0x7f, 0x7f, 0x2, 0x3, 0xffff41a3, 0x1f3, 0x38, 0x2ed, 0x6, 0x3, 0x20, 0x2, 0x7fff, 0x3, 0x81}, [{0x60000000, 0x5, 0x0, 0x4, 0xc94, 0x8, 0x1000, 0x40}], "a935ef4bb536f17d7ecf05dc87fc0d2aee9d4b75fe005b72703410b7185903c4135bc9761a8b1895fbce188e64614877ef5bc5796ab7ade3be510eb2258867944ea42484aa6e6d90317b0f37a99b874172ad1af998ab21834eb1a9ef28c280852c5d04d1d061e56038a66f4096a800e52e472c2ba076ce011450a2a0a35b6a1868a25eca785b1fa81dff75cd37a391cc91b63113ac9992da36318811c7eca2ec90019b804c2c6bf2926ca7e1c874ae2cc67b4f1f35d8c21a", [[], [], [], [], []]}, 0x610) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4(0xffffffffffffffff, &(0x7f0000001dc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e40)=0x80, 0x80000) bind$can_raw(r4, &(0x7f0000001e80)={0x1d, r5}, 0x10) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 22:52:50 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xf36, 0x2000) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f00000000c0)={0x9, 0x10000, 0x3ffc}) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e22, 0x80000000, @private0={0xfc, 0x0, [], 0x1}, 0x7}, {0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffff45}, 0x8, [0x6, 0x8, 0x20, 0x8, 0x0, 0x1, 0x800, 0x4a2b0]}, 0x5c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x1000}) close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1fc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81f6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ac1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "008edaecf4fb1d5ddb826cf085fabee41f2580ae6fe1"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "78002aa7b40dda833a391f4ef4055f5d9cf8e7a33c592b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc27}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x6a}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c000) 22:52:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0xc011, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0xfff, 0xb, 0x3}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000000)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x10, 0x3, 0x12, r0, 0x0) [ 1019.949191][ T32] audit: type=1800 audit(1593989570.800:39): pid=7023 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15762 res=0 [ 1020.032468][ T7026] usb usb9: usbfs: process 7026 (syz-executor.5) did not claim interface 0 before use [ 1020.084598][ T32] audit: type=1326 audit(1593989570.860:40): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7021 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 22:52:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000a0601010000000000000000000000000500010016fcff000900020073797a30000000002400078006000440000000000c00148008000140ac1414bb0c00018008000140"], 0x4c}}, 0x0) [ 1020.279385][ T7026] usb usb9: usbfs: process 7026 (syz-executor.5) did not claim interface 0 before use [ 1020.299314][ T32] audit: type=1800 audit(1593989571.030:41): pid=7037 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15764 res=0 22:52:51 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x8}, 0x6, 0x40, 0x3, 0x6, 0xb, 'syz0\x00', "10e05be9518fcfcf87465c55419e956c7f830a8940f579ab120edfd64708d0ef", "0961fabbaa8113bf10d89ef49ca8c1fd8a4b3c097d6b4250664370119d24f452", [{0x7fff, 0x9, {0x2, 0x79}}, {0x7fff, 0xff01, {0x0, 0x4}}, {0x4, 0x200, {0x2, 0x7fff}}, {0x3, 0xfff9, {0x0, 0x5}}, {0x2, 0x6, {0x0, 0xfffffffa}}, {0x7, 0x2, {0x1, 0xa98}}, {0x8, 0x800, {0x1, 0x3ff}}, {0x8, 0x5, {0x1, 0x3ff}}, {0x7, 0x4}, {0x2, 0x101, {0x1, 0x5}}, {0x3, 0x7ff, {0x3, 0xffffff26}}, {0x2, 0x0, {0x2, 0x1ff}}, {0x81, 0x800, {0x0, 0x9}}, {0x0, 0x1, {0x0, 0x8}}, {0x7ff, 0x0, {0x3, 0x4}}, {0x0, 0x7, {0x0, 0x1000}}, {0x81, 0x0, {0x2, 0xff}}, {0x9, 0x4, {0x3, 0x1f}}, {0x4, 0x3, {0x3, 0x6}}, {0xb7ec, 0xfff7, {0x2, 0x7ff}}, {0x1000, 0x1000, {0x3, 0x3}}, {0x2, 0x7ff, {0x2, 0x8}}, {0x7fff, 0x4, {0x1, 0x7fffffff}}, {0x8, 0x9, {0x3, 0xb683}}, {0xf8bd, 0x1, {0x0, 0x1f}}, {0x627a, 0x9, {0x2, 0x9}}, {0x84, 0x7f, {0x1, 0xa11}}, {0x3f, 0x8001, {0x2, 0xfffffffa}}, {0x7f, 0x8, {0x1, 0x8}}, {0x9, 0x8864, {0x2, 0x1}}, {0x3ff, 0x928, {0x3}}, {0x1000, 0x7f, {0x3, 0x9}}, {0xffff, 0x6, {0x1}}, {0xff, 0xcc39, {0x2, 0x5ab6}}, {0x800, 0x200, {0x1, 0xffffffff}}, {0x6, 0x2, {0x3, 0x800}}, {0x8a, 0x3, {0x0, 0x4}}, {0x9, 0x6, {0x2, 0x5}}, {0x1, 0x7f, {0x1, 0xfff}}, {0x8, 0x5, {0x0, 0x4}}]}}}]}, 0x268}}, 0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:52:51 executing program 3: unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x10000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) writev(r5, &(0x7f0000000980)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000280)='0', 0x1}], 0x2) 22:52:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x6, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000280)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$AUDIT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3e8, 0x0, 0x0, 0x25dfdbfa, "", ["", ""]}, 0x10}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xa516}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$CAPI_INSTALLED(r3, 0x80024322) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) [ 1020.752153][ T32] audit: type=1326 audit(1593989571.600:42): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7021 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 1020.802198][ T383] tipc: TX() has been purged, node left! [ 1020.848931][ T7072] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1020.861054][ T7072] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1021.020419][ T7081] usb usb9: usbfs: process 7081 (syz-executor.5) did not claim interface 0 before use [ 1021.051547][ T7072] team0: Port device veth7 added 22:52:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x205) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000100)) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x6, 0x4a16b657, 0x8, 0x356, 0x6b}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x0, 0x42b, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'gretap0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r3, 0x0, 0x1) 22:52:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c000280080001"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/3) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) 22:52:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r5) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000240)={0x400, "1f10f2b697e0cad4bf0690e1198ba223072f601b51a06595f541c9c3e905bc56", 0x4, 0x10, 0x3, 0x7d1, 0x4, 0x2, 0x0, 0x1}) symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002004800100200000000006c9078ac141400ac1408bb0d1c907c00000000f5ff0000fffffffffffffffffe1e9c10130e0a327cb46c"], 0x100c) [ 1021.312488][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 22:52:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 22:52:52 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x140) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'ip6erspan0\x00', {0x2, 0x4e20, @multicast1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)) close(r4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000001c0)={0x80000001, 0x80000000, 0x6, 0x7ff, 0x9967, 0xfe}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a800000023002908000000000000000004000000910016809ac084ca577b97ee42eed73e26418461b8cfae54a49fadd0efcdc44134fd81636563f804cc3d7d99639305cea119707d2d966e419726bb4494b3cdf2f6d159a5fad8718c2a3b85a34586bf48d0f59358badd0400000000000000d87d6683557a7cfe50e879df3fb358c3853e86be60b9c0114f00e000"/168], 0xa8}, 0x1, 0x60}, 0x44040) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x0) 22:52:52 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'virt_wifi0\x00', {0x3ff}, 0x3}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1021.662243][ T7110] usb usb9: usbfs: process 7110 (syz-executor.5) did not claim interface 0 before use [ 1021.672964][ T7110] vhci_hcd: vhci_hub_control:628: default hub control req: a10e v0000 i0000 l0 22:52:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x40, 0x8, '9P2000.L'}, 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4400, 0x0) ioprio_set$pid(0x1, 0x0, 0x7c3a) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1021.803316][ T7113] netlink: 'syz-executor.4': attribute type 22 has an invalid length. 22:52:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8200, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @remote, 0x193}, {0xa, 0x4e24, 0x40, @ipv4={[], [], @multicast1}}, 0xffffffffffffffff, 0xfffffff8}}, 0x48) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x600c2, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x7, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') close(r4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000140)) connect$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x7f, @mcast2, 0xfffffffd, 0x1}, 0x20) [ 1021.989256][ T7110] usb usb9: usbfs: process 7110 (syz-executor.5) did not claim interface 0 before use [ 1021.999565][ T7110] vhci_hcd: vhci_hub_control:628: default hub control req: a10e v0000 i0000 l0 [ 1022.109991][ T7130] netlink: 'syz-executor.4': attribute type 22 has an invalid length. 22:52:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x40, 0x13, 0x1, 0x2, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000080)={0xffffffff, "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"}) 22:52:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESOCT=r2, @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYRES32=r4, @ANYRES64, @ANYBLOB="7bfd1cc3ee22350ea889b4a9cfc4fd2bdb717471e4546c97b45c5c284e7a554aa8528568c13af6ce505465547e4fc6d278147d3f95751a8cd3fd1b5e032e", @ANYRES32=r7], 0x18}}, 0x0) close(r0) 22:52:53 executing program 1: umount2(&(0x7f0000000000)='./file0\x00', 0xe) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x138, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 22:52:53 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 1022.709573][ T7164] vhci_hcd: vhci_hub_control:628: default hub control req: 4013 v0001 i0002 l0 [ 1023.002835][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:53 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000180)="1e47385c036e3aa254882f521d91ef1d92ed25891fd7ea53433ba0edc53f34d1f941fe637de4fbde10cbb9defe9dcc093f1eccafe70cf7601f3c1701a2a1418007d68ca2782c74350dc3bf526811bfb16039b01643c9f4c280ed4777499701d44ff912f70ec4712a1624ddd262d3938af25ffe192fbf3af6744151136535ac1f15ac941bf4949121701d91b011", &(0x7f0000000240)="723cb65a93f69950276442be97b286a9e3b1a0da4ad59477f5e0edca35692885b0c3e939781b72ed04bebcf426795177308ad20d51a1a0d9bc49e92fd04076f8a687a4f4e16e512a7103e6c0da7c8850ea4a01d81eb0f2f2112a71d36eed93758bccad08"}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1023.084762][ T7185] device macvtap1 entered promiscuous mode [ 1023.115674][ T7190] device macvtap2 entered promiscuous mode 22:52:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108043180ecdb4cb92e0a480e0a07000000b61d46b90eb0236979cbb8e3bd6efb250009000e000d", 0x2e}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000240)={0x9, 0x6, 0x7fff, 0x53, &(0x7f00000000c0)=""/83, 0xad, &(0x7f0000000140)=""/173, 0xc, &(0x7f0000000200)=""/12}) 22:52:54 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000240)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x210000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r5) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d) 22:52:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r5) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0xa, r3, 0x1d, r5}, 0x10) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000580)=0x8) [ 1023.298774][ T7200] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.350289][ T7190] device macvtap3 entered promiscuous mode [ 1023.390156][ T7200] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.451857][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:52:54 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0x54, 0x21, 0xd39, 0x0, 0x0, {{@in6=@mcast2, @in6=@empty}, 0xfffffffe}, [@migrate={0x4}]}, 0x54}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x79e9, 0x0, 0x4, 0x40000000, 0xb00d, {0x77359400}, {0x3, 0xc, 0x5, 0x6a, 0x40, 0x6, "63122a3c"}, 0x0, 0x4, @userptr=0x800, 0x0, 0x0, r1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x1, 0x620d99d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, &(0x7f0000000100)=0x8) socket$inet(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 1023.547453][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1023.592331][ T7185] device macvtap4 entered promiscuous mode [ 1023.627915][ T7190] device macvtap5 entered promiscuous mode 22:52:54 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r0+10000000}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x8002}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000280)={0x3, r3, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r4) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000080)={0x26d, 0x2f}) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, [0x3f, 0x6, 0x4, 0x2]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000380)={0x4, 0x1, 0x7fff, 0x8, 'syz0\x00', 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) [ 1023.656894][ T7213] IPVS: ftp: loaded support on port[0] = 21 [ 1023.790317][ T7190] device macvtap6 entered promiscuous mode 22:52:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x4, r5, 0x0, 0x0, 0x1}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x21}}, 0x20}}, 0x0) [ 1023.947072][ T7227] IPVS: ftp: loaded support on port[0] = 21 22:52:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1, 0x16, 0x1f, 0x7, 0xffffffffffffffdc, 0x0, 0x0}) 22:52:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x20, 0x6, 0x7f}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x100000000) r5 = gettid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r6) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xfffffff9, 0xc, 0x1, "9805a2e7aa37ad83020718cfae7d2373f0479c9f1ba73e654dc72e27a84c0347", 0x47314356}) r7 = syz_open_procfs(r5, &(0x7f0000000040)='ns\x00') fchdir(r7) exit(0x0) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 1024.298179][ T7263] usb usb9: usbfs: process 7263 (syz-executor.5) did not claim interface 7 before use 22:52:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800bd96190405070000000000c1ffffff000002", @ANYRES32=r9, @ANYRES64=r5], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001400210100b5ec3dc2f4f53676d9d168b7e370e5317b9cde4829c90bbb0a017cf34d3b8abc757cb54704ed8b944eb4f3c33b564ea3bb7bf4ee1a0065a5c4265f3c299bfea404301739a1257d03000000b32ab2769de387a2bdcf099933d2a1e91c89e90bbd1b1522df44cd4bae562f19ffa2b74c8ca29bcc16db7f674d1c024aeef65d803a477d024ed89e9504f08593d3ac30764532169b3d7c", @ANYRES32=r9, @ANYBLOB="08000200e00000020800010000000000"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@ipv4={[], [], @remote}, 0x50, r9}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0xa01, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x4050) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 1024.573860][ T7272] IPVS: ftp: loaded support on port[0] = 21 22:52:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x369081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 22:52:55 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r1+10000000}, &(0x7f00000000c0)) umount2(&(0x7f0000000080)='./file0\x00', 0x8) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x200000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)) 22:52:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800bd96190405070000000000c1ffffff000002", @ANYRES32=r9, @ANYRES64=r5], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001400210100b5ec3dc2f4f53676d9d168b7e370e5317b9cde4829c90bbb0a017cf34d3b8abc757cb54704ed8b944eb4f3c33b564ea3bb7bf4ee1a0065a5c4265f3c299bfea404301739a1257d03000000b32ab2769de387a2bdcf099933d2a1e91c89e90bbd1b1522df44cd4bae562f19ffa2b74c8ca29bcc16db7f674d1c024aeef65d803a477d024ed89e9504f08593d3ac30764532169b3d7c", @ANYRES32=r9, @ANYBLOB="08000200e00000020800010000000000"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@ipv4={[], [], @remote}, 0x50, r9}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0xa01, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x4050) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 22:52:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x1, 0x3, 0xfffe, 0x0, 0x0, 0x6, 0x0}) [ 1025.425368][ T7308] usb usb9: usbfs: process 7308 (syz-executor.5) did not claim interface 0 before use [ 1025.435857][ T7308] vhci_hcd: vhci_hub_control:628: default hub control req: 0103 vfffe i0000 l0 [ 1026.291304][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1026.333879][ T7220] IPVS: ftp: loaded support on port[0] = 21 [ 1026.363525][ T383] tipc: TX() has been purged, node left! 22:52:57 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x25a9, 0x0, 0x0, 0x0, 0x10000000000, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r2) socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup2(r2, r0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1d, 0x6051, r3, 0x83000000) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40000}}, 0x20}}, 0x24002040) 22:52:57 executing program 2: socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r3) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) socket(0x0, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000740fb979bfda9190340104774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b4f000000b0b9cad4a128"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 22:52:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002cbd7000ffdbdf250100000018000400010000800100008020000000010000000000000005000500010000000800040003000000080002000300000008000200ff7f0000050006000600000014000100fc01000000000000000000000000000114000100fe80000000000000000000000000001f14000100ff020000000000000000000000000001"], 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:52:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) fremovexattr(r3, &(0x7f00000000c0)=@random={'trusted.', '/dev/bus/usb/00#/00#\x00'}) 22:52:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1b, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:52:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xb, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x40, 0x1, 0x0, "4f96849fb62f52100d4d5167225138f0f1e4baea08b57d3648e9dbaaf59aae53"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2b04000000000000000001000000e4e51be26e32bcee0010001700000000000000003a000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x409, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x80) close(r2) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000000)) 22:52:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4, 0xfffffc01, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r5, @in={{0x2, 0x4e22, @remote}}, 0x7fff, 0x8, 0xa8ae, 0xfffffffa, 0x0, 0x6, 0x3f}, 0x9c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bind$packet(r9, &(0x7f0000000240)={0x11, 0xf7, r10, 0x1, 0x3, 0x6, @link_local}, 0x14) close(r6) [ 1027.484652][ T7381] usb usb9: usbfs: process 7381 (syz-executor.5) did not claim interface 0 before use [ 1027.516007][ T7378] ===================================================== [ 1027.522989][ T7378] BUG: KMSAN: uninit-value in __tipc_nl_compat_dumpit+0x583/0x1290 [ 1027.523039][ T7378] CPU: 0 PID: 7378 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1027.523039][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.523039][ T7378] Call Trace: [ 1027.523039][ T7378] dump_stack+0x1c9/0x220 [ 1027.523039][ T7378] kmsan_report+0xf7/0x1e0 [ 1027.523039][ T7378] __msan_warning+0x58/0xa0 [ 1027.523039][ T7378] __tipc_nl_compat_dumpit+0x583/0x1290 [ 1027.523039][ T7378] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1027.523039][ T7378] ? __alloc_skb+0x762/0xac0 [ 1027.523039][ T7378] tipc_nl_compat_dumpit+0x761/0x910 [ 1027.523039][ T7378] tipc_nl_compat_recv+0x1382/0x2940 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x4f/0x180 [ 1027.523039][ T7378] ? tipc_nl_bearer_set+0xb0/0xb0 [ 1027.523039][ T7378] ? tipc_nl_compat_sk_dump+0xf00/0xf00 [ 1027.523039][ T7378] ? tipc_netlink_compat_stop+0x40/0x40 [ 1027.523039][ T7378] genl_rcv_msg+0x20dc/0x2480 [ 1027.523039][ T7378] netlink_rcv_skb+0x451/0x650 [ 1027.523039][ T7378] ? genl_unbind+0x380/0x380 [ 1027.523039][ T7378] genl_rcv+0x63/0x80 [ 1027.523039][ T7378] netlink_unicast+0xf9e/0x1100 [ 1027.523039][ T7378] ? genl_pernet_exit+0x90/0x90 [ 1027.523039][ T7378] netlink_sendmsg+0x1246/0x14d0 [ 1027.523039][ T7378] ? netlink_getsockopt+0x1440/0x1440 [ 1027.523039][ T7378] ____sys_sendmsg+0x12b6/0x1350 [ 1027.523039][ T7378] __sys_sendmsg+0x623/0x750 [ 1027.523039][ T7378] ? kmsan_copy_to_user+0x81/0x90 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1027.523039][ T7378] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1027.523039][ T7378] __se_sys_sendmsg+0x97/0xb0 [ 1027.523039][ T7378] __x64_sys_sendmsg+0x4a/0x70 [ 1027.523039][ T7378] do_syscall_64+0xb8/0x160 [ 1027.523039][ T7378] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1027.523039][ T7378] RIP: 0033:0x45cb29 [ 1027.523039][ T7378] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.523039][ T7378] RSP: 002b:00007fe0e4ad3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.523039][ T7378] RAX: ffffffffffffffda RBX: 00000000005019e0 RCX: 000000000045cb29 [ 1027.523039][ T7378] RDX: 0000000000000080 RSI: 0000000020000240 RDI: 0000000000000007 [ 1027.523039][ T7378] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1027.523039][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1027.523039][ T7378] R13: 0000000000000a0d R14: 00000000004d6c50 R15: 00007fe0e4ad46d4 [ 1027.523039][ T7378] [ 1027.523039][ T7378] Uninit was created at: [ 1027.523039][ T7378] kmsan_internal_poison_shadow+0x66/0xd0 [ 1027.523039][ T7378] kmsan_slab_alloc+0x8a/0xe0 [ 1027.523039][ T7378] __kmalloc_node_track_caller+0xb40/0x1200 [ 1027.523039][ T7378] __alloc_skb+0x2fd/0xac0 [ 1027.523039][ T7378] tipc_nl_compat_dumpit+0x6e4/0x910 [ 1027.523039][ T7378] tipc_nl_compat_recv+0x1382/0x2940 [ 1027.523039][ T7378] genl_rcv_msg+0x20dc/0x2480 [ 1027.523039][ T7378] netlink_rcv_skb+0x451/0x650 [ 1027.523039][ T7378] genl_rcv+0x63/0x80 [ 1027.523039][ T7378] netlink_unicast+0xf9e/0x1100 [ 1027.523039][ T7378] netlink_sendmsg+0x1246/0x14d0 [ 1027.523039][ T7378] ____sys_sendmsg+0x12b6/0x1350 [ 1027.523039][ T7378] __sys_sendmsg+0x623/0x750 [ 1027.523039][ T7378] __se_sys_sendmsg+0x97/0xb0 [ 1027.523039][ T7378] __x64_sys_sendmsg+0x4a/0x70 [ 1027.523039][ T7378] do_syscall_64+0xb8/0x160 [ 1027.523039][ T7378] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1027.523039][ T7378] ===================================================== [ 1027.523039][ T7378] Disabling lock debugging due to kernel taint [ 1027.523039][ T7378] Kernel panic - not syncing: panic_on_warn set ... [ 1027.523039][ T7378] CPU: 0 PID: 7378 Comm: syz-executor.1 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 1027.523039][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.523039][ T7378] Call Trace: [ 1027.523039][ T7378] dump_stack+0x1c9/0x220 [ 1027.523039][ T7378] panic+0x3d5/0xc3e [ 1027.523039][ T7378] kmsan_report+0x1df/0x1e0 [ 1027.523039][ T7378] __msan_warning+0x58/0xa0 [ 1027.523039][ T7378] __tipc_nl_compat_dumpit+0x583/0x1290 [ 1027.523039][ T7378] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1027.523039][ T7378] ? __alloc_skb+0x762/0xac0 [ 1027.523039][ T7378] tipc_nl_compat_dumpit+0x761/0x910 [ 1027.523039][ T7378] tipc_nl_compat_recv+0x1382/0x2940 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x4f/0x180 [ 1027.523039][ T7378] ? tipc_nl_bearer_set+0xb0/0xb0 [ 1027.523039][ T7378] ? tipc_nl_compat_sk_dump+0xf00/0xf00 [ 1027.523039][ T7378] ? tipc_netlink_compat_stop+0x40/0x40 [ 1027.523039][ T7378] genl_rcv_msg+0x20dc/0x2480 [ 1027.523039][ T7378] netlink_rcv_skb+0x451/0x650 [ 1027.523039][ T7378] ? genl_unbind+0x380/0x380 [ 1027.523039][ T7378] genl_rcv+0x63/0x80 [ 1027.523039][ T7378] netlink_unicast+0xf9e/0x1100 [ 1027.523039][ T7378] ? genl_pernet_exit+0x90/0x90 [ 1027.523039][ T7378] netlink_sendmsg+0x1246/0x14d0 [ 1027.523039][ T7378] ? netlink_getsockopt+0x1440/0x1440 [ 1027.523039][ T7378] ____sys_sendmsg+0x12b6/0x1350 [ 1027.523039][ T7378] __sys_sendmsg+0x623/0x750 [ 1027.523039][ T7378] ? kmsan_copy_to_user+0x81/0x90 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? kmsan_get_metadata+0x11d/0x180 [ 1027.523039][ T7378] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1027.523039][ T7378] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1027.523039][ T7378] __se_sys_sendmsg+0x97/0xb0 [ 1027.523039][ T7378] __x64_sys_sendmsg+0x4a/0x70 [ 1027.523039][ T7378] do_syscall_64+0xb8/0x160 [ 1027.523039][ T7378] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1027.523039][ T7378] RIP: 0033:0x45cb29 [ 1027.523039][ T7378] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.523039][ T7378] RSP: 002b:00007fe0e4ad3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.523039][ T7378] RAX: ffffffffffffffda RBX: 00000000005019e0 RCX: 000000000045cb29 [ 1027.523039][ T7378] RDX: 0000000000000080 RSI: 0000000020000240 RDI: 0000000000000007 [ 1027.523039][ T7378] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1027.523039][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1027.523039][ T7378] R13: 0000000000000a0d R14: 00000000004d6c50 R15: 00007fe0e4ad46d4 [ 1027.523039][ T7378] Kernel Offset: 0x26e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1027.523039][ T7378] Rebooting in 86400 seconds..