000)=0x1c}}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=""/75, &(0x7f00000001c0)=""/226, &(0x7f00000002c0)=""/130, 0x5000}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$BLKROTATIONAL(r9, 0x127e, &(0x7f0000000540)) [ 2148.659527][ T1960] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, 0xfffffe39}, 0x8800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80002, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x100) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffc}) 16:08:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044306, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x82) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000080)=""/62) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x84}, {0x200000000006, 0x6, 0x0, 0x50000}]}) 16:08:42 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4001, @local}, 0x10) socket$inet(0x2, 0xa, 0xc0) 16:08:42 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2149.539187][ C0] sd 0:0:1:0: [sg0] tag#743 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2149.549760][ C0] sd 0:0:1:0: [sg0] tag#743 CDB: Test Unit Ready [ 2149.556419][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.566169][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.575959][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.585863][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.595643][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.605378][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.615176][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.624919][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.634682][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.644393][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.654178][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.663933][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.673741][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.683577][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2149.693368][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:42 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={r6, 0x1f, 0x9}, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', r5}) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:08:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='+', 0x1}], 0x1}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) [ 2149.914163][ T2550] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1c}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x44}}, 0x0) 16:08:43 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:43 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000c040)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000080)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f0000000400)=@phonet, 0x80, 0x0}}], 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000100)=""/82) [ 2150.774501][ C0] sd 0:0:1:0: [sg0] tag#744 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2150.785311][ C0] sd 0:0:1:0: [sg0] tag#744 CDB: Test Unit Ready [ 2150.791969][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.801643][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.811510][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.821358][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.831096][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.840836][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.850594][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.860325][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.870049][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.879834][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.889579][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.899316][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.909062][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:08:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x9, 0x8, 0x1}, {0x5, 0x6a, 0x4, 0x8}, {0x2, 0xff, 0x8, 0x80}, {0x2, 0x4, 0x8, 0x635b29b}]}) 16:08:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800007f7b0a14d782c5e129000000000013ec010000000000", @ANYRES32=0x0, @ANYBLOB="aadd85f225000007e3ff"], 0x48}}, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x200) read$midi(r5, &(0x7f00000000c0)=""/30, 0x1e) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000d2800"/98], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000025c0)=@newchain={0x24, 0x64, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) [ 2150.918822][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.928549][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2150.938077][ T32] audit: type=1400 audit(1583078923.942:63): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=2874 comm="syz-executor.3" [ 2151.207761][ T2935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 16:08:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r3 = inotify_init() r4 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00007a8000)) r5 = inotify_add_watch(r3, &(0x7f00005eaff6)='./control\x00', 0x4000004) inotify_rm_watch(r3, r5) inotify_rm_watch(r2, r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}}, 0x0) 16:08:44 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r2, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r1, 0xfff, &(0x7f0000000040)='\x00'/11) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c46000000000000000000f5000000000000000000000000000038000000000000000000000000002000000900000000000000000000000000000000000000000000000000000000000400000000f5ffffff000000000000000000000000000000000000f700000000000000000000000000000008000000000000000000000000009300000000000000000000000040000000000000000000000000000000000000000000000000000000000000002da821cf71b02d3eaba2d5adf3d8000000000000003c1b6b4cdcd00e250000000000000000000000000000000000000000000000000000000000000000a5b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ddad3200000000000000000cb8b50e600000000000000000000e7cf6caf4aa3a75652000000000000000000000000000000000000000000020000000000000000000000000009007b84aa84e804978a8ff6ad7b09000000000000ed50232c9731efd2ff84dc1c51f89a42447c9ee3e9730afa58a39b845c14cf672d2739bb3e7b5898d619f1e3c597db986feeca02fe605e2de6707b7773d9f2ac7d7db21d44134cb70a0fb3a6d7cd838b40611adfb575bb69f4db4d454497586ea6fcf29f2811f91e9b7ff750d6142aa5734bb65af99807488f349f7a1b31e1658fd29ae75c9b0ec30faabf8318f6affe13deb60da186e9330f7f00f8f1c341f304cfb156cc2fb8f478536a2b0fcc2d1c5022b2ce427ba0fe29f4ffa5abd70e5eb030554c04b0bc2b122fcd178838cdd80ba7b753c68c38a01ae77d14ffd6887b367f1b1eb25b3c9d247c138f93d8c241bb397ec97b3a59f1b346558301ace88de424a4e889166057400d3ba4bb35adbfde799c61a2ee84149bbc5ac94fd5bd54ac81899fec07cdc4a49c9da38e5c094b4ef38731655b188705b5040fcf02f12163de3886a550d21a3c1ea374ba1391f7621c2a28203eecbc4118dd52b36bdc9a61faa5c1fab12e683d38bbff61f2d7d0439b23e0bf558757eb4b999c43ab6faa0f279540a6e24655f40c9af557fde61a878b446b82213aff4413a22338927b5b4f7b60d1fbb26a202c92a1c9b4fdab51fbb4739abfe2638454c3ff3f402554d9af5dbec9046db526c6ebdd810bad66c5f6eac6fe2ca7d0fb4374c333963b5b7f9c4ac3b67cd90ca4955b6ece1b9a47dabccc372be7d323e7c46a3adb12cd1168cc7f3881fb9298d0af3c7fcc16e68808b5cb9f180c35df90ca"], 0x191) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={r5, 0x1f, 0x9}, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', r4}) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r6, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:08:44 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x400c804) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x440200, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000340)=""/4096) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x3c}}, 0x0) [ 2151.616328][ T3183] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:45 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="66642c42768855639692403d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 16:08:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="4f8b"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2152.203413][ T3464] fuse: Bad value for 'fd' 16:08:45 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r2, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r1, 0xfff, &(0x7f0000000040)='\x00'/11) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={r5, 0x1f, 0x9}, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', r4}) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r6, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:08:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) r1 = socket(0x40000000015, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x101002, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000640)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x114}}], 0x18}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000680)={0x3, 'erspan0\x00', 0x1}, 0x18) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0044306, 0x0) close(r4) listen(r0, 0x400000001ffffffd) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000001a00)={'filter\x00', 0x0, 0x3, 0xac, [], 0x8, &(0x7f00000018c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/172}, &(0x7f0000000080)=0x78) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) dup(0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000002576e57a274aecc8875a58b803f6c6ec10ca2ba22e36455fff441fb2", @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf25180000000c009900040000000100000008000100000000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000891}, 0x40800) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x69) ioctl(r1, 0xffffffffffffffff, &(0x7f00000008c0)="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") ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f00000006c0)={0x0, 0x3, 0x5}) 16:08:45 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d1000/0x1000)=nil, 0x1000) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044306, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create1(0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x8000000d}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x10000, 0x8, {}, {0x3, 0xc, 0x4, 0x4, 0x7, 0x5, "8ea927e2"}, 0x0, 0x2, @fd, 0x2, 0x0, r1}) r5 = epoll_create1(0x0) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x8000000d}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000000c0)=0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, r7) getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) fchown(r0, r7, r8) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 2152.905456][ T3718] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:46 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2153.544077][ C1] sd 0:0:1:0: [sg0] tag#745 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2153.554779][ C1] sd 0:0:1:0: [sg0] tag#745 CDB: Test Unit Ready [ 2153.561320][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.571122][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.580892][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.590720][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.600490][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.610245][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.620032][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.629844][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.639636][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.649392][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.659171][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.668949][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.678735][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:08:46 executing program 2: r0 = socket(0x10, 0x80802, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x1000}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="390000001000090868fe07002b00000001000a0025000000450300070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0044306, 0x0) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r8, 0xc0044306, 0x0) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r9, 0xc0044306, 0x0) r10 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r10, 0xc0044306, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0044306, 0x0) r11 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r11, 0xc0044306, 0x0) r12 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r12, 0xc0044306, 0x0) r13 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r13, 0xc0044306, 0x0) r14 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r14, 0xc0044306, 0x0) r15 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r15, 0xc0044306, 0x0) r16 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r16, 0xc0044306, 0x0) r17 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r17, 0xc0044306, 0x0) r18 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r18, 0xc0044306, 0x0) write$binfmt_misc(r7, &(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="259e58fc12ec2ac974f8f869281885bcb33ebaf0ab4607c5c57cb2a9eab27183a21548b9eaa47035d5f2640ffb6c049eadd4cf9b7cc4c50b2c80c4f6f0d7439cc89b3d3a289929406d316b14b19a8341cf875b688af3b8cd2b4487691457cb7214633625fc8045bd", @ANYRES64=r8, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESHEX=r9, @ANYPTR64, @ANYRESOCT=0x0, @ANYRES64]], @ANYRESOCT=r10, @ANYRES32, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES64=r9, @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYRES16, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT=r11, @ANYBLOB="78e3f13095eb87aa3f1ed0f8a8e4c7", @ANYRESDEC=r12, @ANYBLOB="41199430d93d992f1f47a32acfa558", @ANYRES16], @ANYBLOB="12d788db0ff2b14c78f3da9dd525fd6db7fe971c61db1188b40f4f9d01d14e9ad02906425ecf614b6d60a17b59126e87593226573352120de5506782fe5e967cc978f4fd30626850190a8e4c3e863918e0c5a12df8e5d2b319de345794b5a9bc2919801b94366f05f05802a1d5a009b9e2574a2ed88c46dfd1c9c15b5aa7dad49c254a81811c08c24180d981853e084a4c0532bfddf0d5eb9376e275ef3467380c9f1ef362a426fe5a7969277091eaf4491cf72b47677965090fa904bd8bc8f6e3e9f94f5ee5806880fa62c11f7a83211db3683532093832cd4eb1d3053e33083407f9e6104861447b21bce22777d2bc8c23bba7bed34d", @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT=r13, @ANYRES64=r14, @ANYRES32=r15, @ANYRESOCT=r17], @ANYBLOB="ff811192ea1aed38e4783f896f008000000000000087ffb6d5925c19d4a5d66e", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES32=r6], @ANYRESOCT=r9, @ANYRES16=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRESOCT=r16, @ANYPTR64, @ANYRESDEC=r9, @ANYRES32, @ANYPTR64, @ANYRES16=r17, @ANYRES32=r18]]], 0x5c) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000500)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', r19}) [ 2153.688505][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2153.698377][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:47 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r2, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r1, 0xfff, &(0x7f0000000040)='\x00'/11) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c46000000000000000000f5000000000000000000000000000038000000000000000000000000002000000900000000000000000000000000000000000000000000000000000000000400000000f5ffffff000000000000000000000000000000000000f700000000000000000000000000000008000000000000000000000000009300000000000000000000000040000000000000000000000000000000000000000000000000000000000000002da821cf71b02d3eaba2d5adf3d8000000000000003c1b6b4cdcd00e250000000000000000000000000000000000000000000000000000000000000000a5b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ddad3200000000000000000cb8b50e600000000000000000000e7cf6caf4aa3a75652000000000000000000000000000000000000000000020000000000000000000000000009007b84aa84e804978a8ff6ad7b09000000000000ed50232c9731efd2ff84dc1c51f89a42447c9ee3e9730afa58a39b845c14cf672d2739bb3e7b5898d619f1e3c597db986feeca02fe605e2de6707b7773d9f2ac7d7db21d44134cb70a0fb3a6d7cd838b40611adfb575bb69f4db4d454497586ea6fcf29f2811f91e9b7ff750d6142aa5734bb65af99807488f349f7a1b31e1658fd29ae75c9b0ec30faabf8318f6affe13deb60da186e9330f7f00f8f1c341f304cfb156cc2fb8f478536a2b0fcc2d1c5022b2ce427ba0fe29f4ffa5abd70e5eb030554c04b0bc2b122fcd178838cdd80ba7b753c68c38a01ae77d14ffd6887b367f1b1eb25b3c9d247c138f93d8c241bb397ec97b3a59f1b346558301ace88de424a4e889166057400d3ba4bb35adbfde799c61a2ee84149bbc5ac94fd5bd54ac81899fec07cdc4a49c9da38e5c094b4ef38731655b188705b5040fcf02f12163de3886a550d21a3c1ea374ba1391f7621c2a28203eecbc4118dd52b36bdc9a61faa5c1fab12e683d38bbff61f2d7d0439b23e0bf558757eb4b999c43ab6faa0f279540a6e24655f40c9af557fde61a878b446b82213aff4413a22338927b5b4f7b60d1fbb26a202c92a1c9b4fdab51fbb4739abfe2638454c3ff3f402554d9af5dbec9046db526c6ebdd810bad66c5f6eac6fe2ca7d0fb4374c333963b5b7f9c4ac3b67cd90ca4955b6ece1b9a47dabccc372be7d323e7c46a3adb12cd1168cc7f3881fb9298d0af3c7fcc16e68808b5cb9f180c35df90ca"], 0x191) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={r5, 0x1f, 0x9}, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', r4}) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r6, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2154.228804][ T4017] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:47 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2154.718006][ C0] not chained 660000 origins [ 2154.722664][ C0] CPU: 0 PID: 16510 Comm: kworker/u4:16 Not tainted 5.6.0-rc2-syzkaller #0 [ 2154.731252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2154.741333][ C0] Workqueue: krdsd rds_connect_worker [ 2154.746710][ C0] Call Trace: [ 2154.749999][ C0] [ 2154.752863][ C0] dump_stack+0x1c9/0x220 [ 2154.757218][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 2154.762979][ C0] ? xfrm_lookup_route+0x2c1/0x370 [ 2154.768121][ C0] ? ip_route_output_flow+0x35a/0x3d0 [ 2154.771274][ C1] sd 0:0:1:0: [sg0] tag#746 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2154.773503][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.773522][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.773540][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2154.773559][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 2154.773575][ C0] ? tcp_select_initial_window+0x60d/0x6c0 [ 2154.773601][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.773619][ C0] __msan_chain_origin+0x50/0x90 [ 2154.773695][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 2154.784148][ C1] sd 0:0:1:0: [sg0] tag#746 CDB: Test Unit Ready [ 2154.789192][ C0] tcp_conn_request+0x33d7/0x4d10 [ 2154.794636][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.800260][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.806607][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.812220][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2154.812243][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2154.812260][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 2154.812275][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2154.812295][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.812312][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2154.812331][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2154.812424][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.817751][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.822584][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2154.822613][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2154.822736][ C0] ? tcp_filter+0xf0/0xf0 [ 2154.828113][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.834337][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2154.834366][ C0] ip_local_deliver+0x62a/0x7c0 [ 2154.834394][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 2154.834408][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 2154.834423][ C0] ip_rcv+0x6cf/0x750 [ 2154.834502][ C0] ? ip_rcv_core+0x1270/0x1270 [ 2154.839617][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.848970][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 2154.848989][ C0] process_backlog+0xf0b/0x1410 [ 2154.849013][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 2154.849043][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 2154.849058][ C0] net_rx_action+0x786/0x1aa0 [ 2154.849141][ C0] ? net_tx_action+0xc30/0xc30 [ 2154.854532][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.863815][ C0] __do_softirq+0x311/0x83d [ 2154.863845][ C0] do_softirq_own_stack+0x49/0x80 [ 2154.863852][ C0] [ 2154.863870][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 2154.863892][ C0] local_bh_enable+0x36/0x40 [ 2154.863975][ C0] ip_finish_output2+0x2115/0x2610 [ 2154.869192][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.874117][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 2154.874144][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 2154.874184][ C0] __ip_finish_output+0xaa7/0xd80 [ 2154.874275][ C0] ip_finish_output+0x166/0x410 [ 2154.879640][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.884934][ C0] ip_output+0x593/0x680 [ 2154.884964][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 2154.884982][ C0] ? ip_finish_output+0x410/0x410 [ 2154.884997][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 2154.885072][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 2154.890335][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.896057][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.896091][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.896115][ C0] ip_queue_xmit+0xcc/0xf0 [ 2154.896186][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 2154.902367][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.907465][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 2154.917053][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.921522][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2154.926154][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.930392][ C0] tcp_connect+0x4337/0x6920 [ 2154.940053][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.945295][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 2154.945314][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.945415][ C0] tcp_v4_connect+0x21fd/0x2370 [ 2154.950340][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.955297][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 2154.955318][ C0] __inet_stream_connect+0x2fb/0x1340 [ 2154.955391][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 2154.961105][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2154.965007][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2154.965033][ C0] inet_stream_connect+0x101/0x180 [ 2154.965053][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 2154.965124][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 2155.264750][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2155.269946][ C0] ? rds_tcp_state_change+0x390/0x390 [ 2155.275317][ C0] rds_connect_worker+0x2a6/0x470 [ 2155.280332][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2155.286405][ C0] ? rds_addr_cmp+0x200/0x200 [ 2155.291073][ C0] process_one_work+0x1555/0x1f40 [ 2155.296109][ C0] worker_thread+0xef6/0x2450 [ 2155.300784][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2155.306578][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2155.311790][ C0] kthread+0x4b5/0x4f0 [ 2155.315850][ C0] ? process_one_work+0x1f40/0x1f40 [ 2155.321055][ C0] ? kthread_blkcg+0xf0/0xf0 [ 2155.325635][ C0] ret_from_fork+0x35/0x40 [ 2155.330053][ C0] Uninit was stored to memory at: [ 2155.335075][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2155.340782][ C0] __msan_chain_origin+0x50/0x90 [ 2155.345717][ C0] tcp_conn_request+0x1781/0x4d10 [ 2155.350726][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.355947][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2155.360968][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.366349][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.370951][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.375453][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.380926][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.385795][ C0] ip_rcv+0x6cf/0x750 [ 2155.389784][ C0] process_backlog+0xf0b/0x1410 [ 2155.394633][ C0] net_rx_action+0x786/0x1aa0 [ 2155.399314][ C0] __do_softirq+0x311/0x83d [ 2155.403801][ C0] [ 2155.406123][ C0] Uninit was stored to memory at: [ 2155.411165][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2155.416902][ C0] __msan_chain_origin+0x50/0x90 [ 2155.421851][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 2155.427139][ C0] tcp_conn_request+0x33d7/0x4d10 [ 2155.432159][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.437263][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2155.442304][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.447703][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.452639][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.457157][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.462629][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.467477][ C0] ip_rcv+0x6cf/0x750 [ 2155.471470][ C0] process_backlog+0xf0b/0x1410 [ 2155.476329][ C0] net_rx_action+0x786/0x1aa0 [ 2155.481003][ C0] __do_softirq+0x311/0x83d [ 2155.485494][ C0] [ 2155.487817][ C0] Uninit was stored to memory at: [ 2155.492843][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2155.498574][ C0] __msan_chain_origin+0x50/0x90 [ 2155.503515][ C0] tcp_conn_request+0x1781/0x4d10 [ 2155.508533][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.513690][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2155.518721][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.524096][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.528677][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.533199][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.538662][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.543514][ C0] ip_rcv+0x6cf/0x750 [ 2155.547513][ C0] process_backlog+0xf0b/0x1410 [ 2155.552366][ C0] net_rx_action+0x786/0x1aa0 [ 2155.557050][ C0] __do_softirq+0x311/0x83d [ 2155.561556][ C0] [ 2155.563881][ C0] Uninit was stored to memory at: [ 2155.568904][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2155.574632][ C0] __msan_chain_origin+0x50/0x90 [ 2155.579584][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 2155.584881][ C0] tcp_conn_request+0x33d7/0x4d10 [ 2155.589914][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.595017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2155.600029][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.605386][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.609975][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.614468][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.619912][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.624748][ C0] ip_rcv+0x6cf/0x750 [ 2155.628718][ C0] process_backlog+0xf0b/0x1410 [ 2155.633576][ C0] net_rx_action+0x786/0x1aa0 [ 2155.638242][ C0] __do_softirq+0x311/0x83d [ 2155.642722][ C0] [ 2155.645040][ C0] Uninit was stored to memory at: [ 2155.650051][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2155.655756][ C0] __msan_chain_origin+0x50/0x90 [ 2155.660689][ C0] tcp_conn_request+0x1781/0x4d10 [ 2155.665710][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.670813][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2155.675825][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.681190][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.685766][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.690257][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.695703][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.700561][ C0] ip_rcv+0x6cf/0x750 [ 2155.704531][ C0] process_backlog+0xf0b/0x1410 [ 2155.709378][ C0] net_rx_action+0x786/0x1aa0 [ 2155.714050][ C0] __do_softirq+0x311/0x83d [ 2155.718532][ C0] [ 2155.720844][ C0] Uninit was stored to memory at: [ 2155.725858][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2155.731564][ C0] __msan_chain_origin+0x50/0x90 [ 2155.736489][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 2155.741763][ C0] tcp_conn_request+0x33d7/0x4d10 [ 2155.746778][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.751874][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2155.756904][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.763576][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.768171][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.772682][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.778133][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.783061][ C0] ip_rcv+0x6cf/0x750 [ 2155.787038][ C0] process_backlog+0xf0b/0x1410 [ 2155.791877][ C0] net_rx_action+0x786/0x1aa0 [ 2155.796544][ C0] __do_softirq+0x311/0x83d [ 2155.801025][ C0] [ 2155.803337][ C0] Uninit was stored to memory at: [ 2155.808352][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2155.814067][ C0] __msan_chain_origin+0x50/0x90 [ 2155.818989][ C0] tcp_conn_request+0x1781/0x4d10 [ 2155.824001][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.829097][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2155.834115][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.839471][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.844048][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.848538][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.853982][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.858821][ C0] ip_rcv+0x6cf/0x750 [ 2155.862805][ C0] process_backlog+0xf0b/0x1410 [ 2155.867641][ C0] net_rx_action+0x786/0x1aa0 [ 2155.872320][ C0] __do_softirq+0x311/0x83d [ 2155.876804][ C0] [ 2155.879112][ C0] Uninit was created at: [ 2155.883351][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 2155.888971][ C0] kmsan_alloc_page+0x12a/0x310 [ 2155.893811][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 2155.899344][ C0] alloc_pages_current+0x67d/0x990 [ 2155.904439][ C0] alloc_slab_page+0x111/0x12f0 [ 2155.909276][ C0] new_slab+0x2bc/0x1130 [ 2155.913515][ C0] ___slab_alloc+0x1533/0x1f30 [ 2155.918270][ C0] kmem_cache_alloc+0xb23/0xd70 [ 2155.923124][ C0] inet_reqsk_alloc+0xac/0x830 [ 2155.927884][ C0] tcp_conn_request+0x753/0x4d10 [ 2155.932814][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2155.937932][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2155.943293][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2155.947869][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2155.952361][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2155.957807][ C0] ip_local_deliver+0x62a/0x7c0 [ 2155.962646][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 2155.967482][ C0] ip_list_rcv+0x8eb/0x950 [ 2155.971900][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 2155.978061][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 2155.984307][ C0] napi_complete_done+0x2ef/0xb60 [ 2155.989339][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 2155.994715][ C0] virtnet_poll+0x1468/0x19f0 [ 2155.999397][ C0] net_rx_action+0x786/0x1aa0 [ 2156.004184][ C0] __do_softirq+0x311/0x83d 16:08:49 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:49 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0xd2, 0x300000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000480)={0x14, 0x1f, 0x8, 0x10, 0x9, 0x6, 0x6, 0xd1}) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r1, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60940000004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20001e9078e29607149378d33e1db1c73936c77abf25ae4fc4f5d282174ad17bb2401ea3f7fa9f11cf1ac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429"], 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r8, 0xc0044306, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000003c0)={0xf9b0000, 0x2, 0x0, r8, 0x0, &(0x7f0000000380)={0x9909db, 0x4565, [], @p_u8=&(0x7f0000000340)=0x4}}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000000400)={0x9}, 0x1) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x10) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@ipx={0x4, 0x8, 0x3ff, "312ba3c32a79", 0x1}, {&(0x7f00000001c0)=""/92, 0x5c}, &(0x7f0000000240), 0x4}, 0xa0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400082, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) poll(&(0x7f0000000040)=[{r1}], 0x2000000000000046, 0x0) [ 2156.417771][ C0] sd 0:0:1:0: [sg0] tag#747 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2156.428341][ C0] sd 0:0:1:0: [sg0] tag#747 CDB: Test Unit Ready [ 2156.435002][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.444729][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.454517][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.464306][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.474025][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.483806][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.493544][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.503327][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.513108][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.522919][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.532681][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.542453][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.552206][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:08:49 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0x9) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10012, r0, 0x81000000) [ 2156.562001][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2156.571670][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:49 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={r6, 0x1f, 0x9}, &(0x7f0000000600)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', r5}) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:08:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="8e1a00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x10005, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000100)={r11}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r11, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000340)={r11, 0x84}, &(0x7f0000000380)=0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) splice(r13, 0x0, r14, 0x0, 0x10005, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r13, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x3, 0x5}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x5, 0x5, 0x9}, &(0x7f0000000580)=0xb57c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x9}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r12, 0x10, &(0x7f0000000700)={&(0x7f0000000400)=""/54, 0x36, r15}}, 0x10) close(r6) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f00000002c0)={0x4, 0x1, @start={0x2}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_ACT={0x34, 0x6, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x14, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}]}]}}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) [ 2156.929103][ T4305] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xfff, 0x0, 0x8, 0x80000001}]}) sendto$inet6(r0, &(0x7f00000000c0)="bd", 0x20000, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) close(r2) 16:08:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0044306, 0x0) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0044306, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0044306, 0x0) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x56, "6d49f2b0b4fc2bede36141b8faf2b78b3eff5190b0b53219dbcadd86d0bf29366c93f70fc2c779ac3869ee33fe08db01f152628dc11f2e94f4efcf2b7fad02084a50ae100cf11748c9e468cb24d74c72b03525516db1"}, &(0x7f0000000100)=0x5e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x6}, &(0x7f0000000140)=0x90) ioctl$CAPI_MANUFACTURER_CMD(r5, 0xc0044306, 0x0) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0044306, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x20) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r8, 0x801, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7254896fba22"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="26f8b0da1123784fc17c2c39911532e417863bcbd1281d015204382e6065fc09bb6dfa5749d44278a9585bca569af2b82ab6a4e6e0e531a8184fd8d4533355c6b5549d4922959094a9dbe917dc48a4f8de2543bdf85d0e684f58cddb554c324b970c95061b81d28adbd594bb3ad0c02b855cc80bda9db6d707313f247a4d1abc12aa9d13f89e7e6a4e6408", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRESOCT=r2, @ANYPTR64, @ANYRES32=r0], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESDEC=r3, @ANYRESOCT, @ANYRES16, @ANYPTR64, @ANYPTR, @ANYRES64=r4, @ANYRES32=r0], @ANYRES64=r5, @ANYRESHEX=r7], @ANYBLOB="fafff0000000000024001200090001007866726d0000000014000200080001000200000008000200010000000a000100040000000000000008000a00649668bcc7ed5a35237bebe2e76e9449a4c98b04f4a35199ce3fd2bf6d8453e02475f2b2f673bac31e10101865b8", @ANYRES32, @ANYBLOB="416ec80095a73b54b7d167d0a23ed8bdf577788549c2a9bdbbc8324a2128b04f9375badfc4131430363c0af67222f950447896db39d83e5f008333c3e57804f7d89046c3c17eb1eb2bc2c35d4b037c92ccf7dcefbbe229eeca38d4ec95e10faf92802408c49b2c80ddb2c38f08377188b1d569ed76ce122e4c21c3e6bb15146a7528562fe4e829892c35684b2c2d480872d44ce7cc3eb6905dccafe6ad617dc0ca22c9185e6b070684cda895eb42ed21d87aafffea50718deae677ee3ce7774dc1ed9ca44fe6d2ab1d7a48ccb62b2a202dd719860a73baca3ed640a9556b9cbe5f17afdb2ac928042f24ad63f400"], 0x5}}, 0x8801) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 16:08:50 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2157.658513][ C1] sd 0:0:1:0: [sg0] tag#748 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2157.669167][ C1] sd 0:0:1:0: [sg0] tag#748 CDB: Test Unit Ready [ 2157.675860][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.685634][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.695381][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.705201][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.714970][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.724741][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.734485][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.744240][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.754020][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.763789][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.773669][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.783498][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.793435][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.803182][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2157.812998][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:51 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={r5, 0x1f, 0x9}, &(0x7f0000000600)=0x8) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r6, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2158.206333][ T4826] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x10005, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000380)={0xf9f0000, 0x57, 0x9, r5, 0x0, &(0x7f0000000340)={0x55eb27925900650b, 0x4, [], @p_u32=&(0x7f00000002c0)}}) sendto$phonet(r10, &(0x7f00000003c0)="ecf319b48823ef9dcec22ade387ea233454f4889d472ded6486cba8ec6197f6c4b2b43b35ca35e100152928e04e89c28af045d8dd0a6e172e3d252c6e23c1f0a4c1dcd008c1176d3003168e0312b0139c0523d37876e4f3df5c031bc693cb6aeaf2fd8bd813d5137a036c0a22abfd3910b6c5fd6573fc774d4f43b13919bfdf309d376f6ce65a969fd39c3cb2eb0e9d17a49d85d0e0af6e8af4f7364bab5137e7b8464a66c6cba9f0af53363cd0684f6fe3289d670e72e6655922b8ec50ab64dc5d6fca16c96f86e805a", 0xca, 0x40000, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c000100766574680000000018000a00fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259fba61afe472b5ae6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0xfec8) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8044}, 0x10040810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x84602, 0x0) r16 = socket(0x3, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r16, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r16, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x80000001, 0x2, 0x1e}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r18 = socket$inet_udp(0x2, 0x2, 0x0) close(r18) splice(r17, 0x0, r18, 0x0, 0x4ffe0, 0x0) r19 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r17, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa8}, 0x3bf, [0x3, 0x9, 0xffffff5f, 0x800, 0x401]}, 0x5c) setsockopt$inet6_int(r19, 0x29, 0x8, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) r20 = accept4(r19, &(0x7f0000000140)=@caif=@util, &(0x7f0000000000)=0x80, 0x40800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r21, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r21, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r22 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r21, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959a2f8d4cb0baf48ba8a8d24a25bf5f947d295fb747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b", @ANYRES16=r22, @ANYBLOB="02002bbd7000ffdbdf250200000c080002"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r20, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x238, r22, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4c}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4}]}, 0x238}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c010) sendmsg$NLBL_CIPSOV4_C_ADD(r17, &(0x7f0000007bc0)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007b80)={&(0x7f0000007a00)=ANY=[@ANYBLOB="44010000", @ANYRES16=r22, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x200410c0) sendmsg$NLBL_CIPSOV4_C_LIST(r17, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x178, r22, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1667789a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57d860a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e848bf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xb66ea6d3f5085afa}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5516}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9254}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79d0b8d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x1, 0x9, 0x2c7aebc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8753}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x147e7c3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x604f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1059}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x115768d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8925}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa97b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b4fa26c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a8fea90}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x437659d7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fa3abad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x784e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e945d63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd171248}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0b30d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4507}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabf8}]}, {0x4}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$NLBL_CIPSOV4_C_LISTALL(r16, &(0x7f0000000100)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r22, @ANYBLOB="d40100000000fedbdf25313e9a040000000c0004800500030002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x884) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="bf290000", @ANYRES16=r22, @ANYBLOB="100027bd7000fbdbdf250300000008000100030000003c0004800500030007000000050003000600000005000300050000000500030007000000050003000500000005000300070000000500030005000000"], 0x58}}, 0x48005) sendmsg$NLBL_CIPSOV4_C_LIST(r15, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r22, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4044800) sendmsg$NLBL_CIPSOV4_C_ADD(r14, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="78030000", @ANYRES16=r22, @ANYBLOB="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"], 0x378}}, 0x4008040) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x104, r22, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25bf9c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc6aae20}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f32472e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b7fda0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x827df61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71bf68c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6af788d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59f4e87c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69be085}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26d9536}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c30abd7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56b3995f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65737ca9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x20044841) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) 16:08:51 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x3ff, 0xa, 0x4, 0x1000, 0xc528, {}, {0x4, 0x8, 0x8, 0x1, 0x9, 0x56, '2.0Q'}, 0x9, 0x4, @fd=r1, 0x7, 0x0, 0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="00000000000000000000000000000001"}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @ib={0x1b, 0x6, 0x9eb5, {"4d45bf818368a494dc9c8862fdda0219"}, 0x7, 0xcce, 0x3}}}, 0x90) 16:08:51 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:51 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2158.560436][ C0] sd 0:0:1:0: [sg0] tag#749 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2158.571166][ C0] sd 0:0:1:0: [sg0] tag#749 CDB: Test Unit Ready [ 2158.577835][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.587707][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.597484][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.607417][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.617211][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.627030][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.636832][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.646587][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.656385][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.666128][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.675917][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.685784][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.695702][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.705443][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.715229][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.801015][ C0] sd 0:0:1:0: [sg0] tag#750 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2158.811831][ C0] sd 0:0:1:0: [sg0] tag#750 CDB: Test Unit Ready [ 2158.818381][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.828229][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.837974][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.847864][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.857619][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.867474][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.877213][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.886997][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.896712][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.906531][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.916436][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.926202][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.935942][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.945673][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2158.955424][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:52 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd90, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000507000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="19f1e34005464fb29fcc3a6b3b4ad7a22e3b7d9918ad9e8cb591c07dbdb950211957480a36796bcec4ef2c8f930c3e11e048a076a41f223e4eb4273a72c89a858962959bdc089b7100"/88, @ANYRESHEX, @ANYRES32, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES16=0x0], @ANYRES32, @ANYPTR64]], 0x4}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 16:08:52 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x40000, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 16:08:52 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c46000000000000000000f5000000000000000000000000000038000000000000000000000000002000000900000000000000000000000000000000000000000000000000000000000400000000f5ffffff000000000000000000000000000000000000f700000000000000000000000000000008000000000000000000000000009300000000000000000000000040000000000000000000000000000000000000000000000000000000000000002da821cf71b02d3eaba2d5adf3d8000000000000003c1b6b4cdcd00e250000000000000000000000000000000000000000000000000000000000000000a5b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ddad3200000000000000000cb8b50e600000000000000000000e7cf6caf4aa3a75652000000000000000000000000000000000000000000020000000000000000000000000009007b84aa84e804978a8ff6ad7b09000000000000ed50232c9731efd2ff84dc1c51f89a42447c9ee3e9730afa58a39b845c14cf672d2739bb3e7b5898d619f1e3c597db986feeca02fe605e2de6707b7773d9f2ac7d7db21d44134cb70a0fb3a6d7cd838b40611adfb575bb69f4db4d454497586ea6fcf29f2811f91e9b7ff750d6142aa5734bb65af99807488f349f7a1b31e1658fd29ae75c9b0ec30faabf8318f6affe13deb60da186e9330f7f00f8f1c341f304cfb156cc2fb8f478536a2b0fcc2d1c5022b2ce427ba0fe29f4ffa5abd70e5eb030554c04b0bc2b122fcd178838cdd80ba7b753c68c38a01ae77d14ffd6887b367f1b1eb25b3c9d247c138f93d8c241bb397ec97b3a59f1b346558301ace88de424a4e889166057400d3ba4bb35adbfde799c61a2ee84149bbc5ac94fd5bd54ac81899fec07cdc4a49c9da38e5c094b4ef38731655b188705b5040fcf02f12163de3886a550d21a3c1ea374ba1391f7621c2a28203eecbc4118dd52b36bdc9a61faa5c1fab12e683d38bbff61f2d7d0439b23e0bf558757eb4b999c43ab6faa0f279540a6e24655f40c9af557fde61a878b446b82213aff4413a22338927b5b4f7b60d1fbb26a202c92a1c9b4fdab51fbb4739abfe2638454c3ff3f402554d9af5dbec9046db526c6ebdd810bad66c5f6eac6fe2ca7d0fb4374c333963b5b7f9c4ac3b67cd90ca4955b6ece1b9a47dabccc372be7d323e7c46a3adb12cd1168cc7f3881fb9298d0af3c7fcc16e68808b5cb9f180c35df90ca"], 0x191) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917}, &(0x7f0000000640)=0x20) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2159.878798][ C0] sd 0:0:1:0: [sg0] tag#751 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2159.889411][ C0] sd 0:0:1:0: [sg0] tag#751 CDB: Test Unit Ready [ 2159.896048][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.905923][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.915653][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.925985][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.935710][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.945452][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.955216][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.965079][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.974810][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.984679][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2159.985360][ T5388] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2159.994465][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.013567][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:08:53 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x11d000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xf) sendfile(r1, r2, 0x0, 0x320f) [ 2160.023308][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.033059][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.042794][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:53 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:53 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2160.636276][ C1] sd 0:0:1:0: [sg0] tag#752 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2160.646992][ C1] sd 0:0:1:0: [sg0] tag#752 CDB: Test Unit Ready [ 2160.650960][ C0] sd 0:0:1:0: [sg0] tag#753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2160.653631][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.664050][ C0] sd 0:0:1:0: [sg0] tag#753 CDB: Test Unit Ready [ 2160.673670][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.680065][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.680179][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.689858][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.699500][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.709145][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.718941][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.728558][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.738185][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.747825][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.757442][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.767082][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.777467][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.787118][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.796717][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.806352][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.815989][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.825632][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.835214][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.844851][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.854426][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.864055][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.873786][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.883426][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.893034][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.902759][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:08:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10440, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x64, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x86c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xafd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) inotify_init1(0xc0000) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r6, 0xc0044306, 0x0) splice(r6, 0x0, r3, 0x0, 0x20, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) r7 = fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) [ 2160.912391][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.922029][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2160.931570][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2161.251654][ T5779] bond2 (unregistering): Released all slaves 16:08:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="15"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x40050) 16:08:54 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="d43bb4185658b15e90ad7ceed2ae05e0729484a3898e62c1dccca657492b64eed3f663b94d04e94ee6bafb67aea02807", 0x30}, {&(0x7f0000000380)="824bd31c4fa03743b2ab1311eb27fba318c212ec77042663c85708f63db6f63d788abbf9d3ac2997d48528111c307660c28ef1dc6d43cb20197395d54d5d50daa1785901169848ea8b47b46e", 0x4c}, {&(0x7f0000000040)="e664402718d98de9fc765a685f7048196abf9fec293f4ccd7183e39abf431ddd15608216d76b593fe6e95f2b4609ad6d88f23f38f63d1abb7d5e345f0694ba4263900daaf6a6e6d86acd983ba86df6dea7aaf46a9609a079706ceb3f2441a274b7fb34a9a5f6fef958ec5e46fb27de26ace8384c0b112427a8adcf49307f88b59ce9a9f442f408b32d947cc0d89865f2c8748dda7e13b2d6dc55d9deeebd4e02", 0xa0}, {&(0x7f0000003340)="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", 0x1c9}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x4, 0x24004000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x2, [0x101, 0x100, 0x84, 0x2, 0x32, 0x80, 0x1, 0x5, 0x0, 0x2, 0x1, 0x2, 0x5, 0xffff, 0x8, 0x8001, 0x7ff, 0x2, 0x1f, 0x40, 0x800, 0x7f, 0x401, 0x352, 0x9, 0x2, 0xff, 0x7fff, 0x5, 0x3, 0x7, 0x3, 0x101, 0x1, 0x0, 0x5a2f, 0xff, 0x1, 0x4, 0x20, 0x3, 0x4, 0xfb0, 0x4, 0x40, 0x2, 0x5, 0xba], 0x8}) [ 2161.862577][ T32] audit: type=1400 audit(1583078934.912:64): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=6089 comm="syz-executor.3" 16:08:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=""/56) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101000, 0x0) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000340)=""/222) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1000, 0x8841) r7 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xfff, 0x200000) openat$cgroup(r7, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000440)) 16:08:54 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = dup2(r1, r0) close(r2) socket$inet(0x2b, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) write$UHID_CREATE2(r3, &(0x7f00000001c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xa1, 0x6, 0x3, 0x4, 0xfffffffc, 0xae52, "958e288d8962baa7f397512df484ac2d091a87e0c57b4c239a9c13dd0bab1529663a1e6d9116c59dcf0e36ae74d244a80a55d393ad1f5d308a6f828307a5d5383eedd14ed2684850f1cdc3f3798aa4fb3a893e3521b5e766f3dea5e2b2d6cfee1151ffa28d80cad110a32eb662d07044fb81b11c57b6eb077faf56273b922bde9fafb186ced40ab5b6c38789d31304d2b50683105dc524fbc2e3834369a37e8f57"}}, 0x1b9) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'geneve0\x00'}) 16:08:55 executing program 2: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'gre0\x00'}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x88005, 0x9dba, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r5, 0xc0044306, 0x0) write(r5, &(0x7f0000000380)="c5f26970d3d654ada526bc719c628b886ffbf9bdf86bac4178f51ac19e52eaaad9c00a804d0ce3e95794397ed0f2cadf4cce51777b33a50bdc997b9554992bfd9757ec0042f208b1d7d2dbb771051135f2dafa3fca7c5421977f459055cb9fdc41c007984c6a195298103b0493e4c9e108dca54a7bbd3cb59b90b7503cf580c871", 0x81) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2162.185874][ C1] sd 0:0:1:0: [sg0] tag#754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2162.196642][ C1] sd 0:0:1:0: [sg0] tag#754 CDB: Test Unit Ready [ 2162.203304][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.213055][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.222820][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.232623][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.242407][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.252190][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.261969][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.271643][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.281419][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.291228][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.300998][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.310778][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.320629][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.330508][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2162.340262][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:55 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x200000) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="700f01c90f9ed80f01c80fc72ac4c2e547a188770000b8cda84c770f23d80f21f80f23f80f2260b9d5080000b80b000000ba000000000f30c4e1556d22", 0x3d}], 0x1, 0x41, 0x0, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x4, 0x4, 0x5}}, 0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000100)=0x5b) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000000)=0x4) 16:08:56 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x8, 0x8, 0x0, 0x8, 0x9, 0x1, 0x917}, &(0x7f0000000640)=0x20) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:08:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="00000000000000000000000000000001"}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfec8) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r4, r5}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0bd49757c6e998061ffad0700000000000095000200000000004000413df8ff0af5aa35334bd4a064905b4225e5752d9f4b382c4caf9db6fa7a9b857b08abcca0a1d05e2b2f4cb2f7d499330730af000000000000002000000027bdfbd301000000ffff08007dd2350d81212429f647bbf3a8522b46dd0658c8c3a319ed85d6fd08d0a09773259ce2c49714b6da3f99fff7380a240c5b2675231a52f3d88127e5297d043262f4f59c48eedc6857d41d30a7a9d1f70c01340a6308f37092950000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 16:08:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$KDDISABIO(r3, 0x4b37) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0044306, 0x0) ioctl(r2, 0x1000808912, &(0x7f00000000c0)='\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r4 = socket(0x11, 0x80000, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2163.324445][ T6533] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:56 executing program 5: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x80, 0x0}, 0x20004040) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x20004040) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x20004040) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x20004040) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r5, 0x0, 0x0) keyctl$unlink(0x9, r5, 0xfffffffffffffff8) keyctl$revoke(0x3, r5) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfec8) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000000180)={0xc, 0x88, 0xc4b9}) sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x20004040) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x20004040) r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x20004040) r10 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, 0x0}, 0x20004040) r11 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r11, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, 0x0, 0xffffffffffffffdb}, 0x20004040) socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0xfec8) setsockopt$TIPC_DEST_DROPPABLE(r12, 0x10f, 0x81, &(0x7f0000000000)=0x9, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xfec8) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b10007fe4dc43046e80c399ab88d60503e3f7000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbfff070000381ad6e74703c48f93b8446b9bb37a461eb88600", 0x53}], 0x1}, 0x0) 16:08:56 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:57 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2164.134449][ C0] sd 0:0:1:0: [sg0] tag#763 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2164.145249][ C0] sd 0:0:1:0: [sg0] tag#763 CDB: Test Unit Ready [ 2164.151946][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.161633][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.171392][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.181306][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.191058][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.200923][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.210676][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.220427][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.230170][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.240029][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.249774][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.259551][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.269296][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:08:57 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:57 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000680)=0xffffffffffffffe6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2164.279008][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.288725][ C0] sd 0:0:1:0: [sg0] tag#763 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.334576][ C1] sd 0:0:1:0: [sg0] tag#764 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2164.345184][ C1] sd 0:0:1:0: [sg0] tag#764 CDB: Test Unit Ready [ 2164.351907][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.361608][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.371570][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.381481][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.391424][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.401197][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.411033][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.420796][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.430579][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.440368][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.450144][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.459916][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.469752][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.479559][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.489326][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.608304][ C1] sd 0:0:1:0: [sg0] tag#765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2164.619097][ C1] sd 0:0:1:0: [sg0] tag#765 CDB: Test Unit Ready [ 2164.625817][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.635601][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.645391][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.655229][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.665054][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.674850][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.684658][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.694575][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.704362][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.714189][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.723964][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.733838][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.743724][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.753502][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.763495][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2164.773988][ T6973] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:57 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000400000020"]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044306, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000520000/0x1000)=nil, &(0x7f00004d4000/0x3000)=nil, &(0x7f0000039000/0x3000)=nil, &(0x7f0000dfe000/0x200000)=nil, &(0x7f0000627000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000e06000/0x3000)=nil, &(0x7f0000f33000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)="76e709a717ea87403a78647f6763de65ca2854e6abd58bcd0eeb3db6ef4304f2ec39cf87a80a65357df4c545213cef886581216f31a4be0203b2ba42099e95c0e77a86aa2e329532db300f07fb82680a619142e1e0b154a63063e357b90d7f9b89ba90fdd8b2d1087ab05afbb790ca3626bdf776414fecc3b473519ce39a49582632efd77b3e519bceb48553c233b963577943921e55a7b8e9f3a15ff09ea99999fd00211ce50369d5a8a59d0e837c6da1dac1f90df07799667b43a3af691d814d275629f1956f0e1a12ce159169281084b2a00a1dd2b0a9", 0xd8, r1}, 0x68) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 16:08:58 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:08:58 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2165.645471][ C0] sd 0:0:1:0: [sg0] tag#767 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2165.648094][ C1] sd 0:0:1:0: [sg0] tag#766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2165.656245][ C0] sd 0:0:1:0: [sg0] tag#767 CDB: Test Unit Ready [ 2165.666697][ C1] sd 0:0:1:0: [sg0] tag#766 CDB: Test Unit Ready [ 2165.673183][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.679573][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.689209][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.698820][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.708312][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.717900][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.727467][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.737057][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.746621][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.756210][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.765833][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.775568][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.785142][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.794746][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.804296][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.813889][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.823505][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.833105][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.842720][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.852314][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.861900][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.871430][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.881018][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.890602][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.900175][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.909817][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.919437][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.929064][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.938627][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2165.948216][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:08:59 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2166.201388][ T32] audit: type=1400 audit(1583078939.252:65): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=7240 comm="syz-executor.3" [ 2166.246334][ T7351] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:08:59 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:08:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x800, 0x0, 0x12}, 0x9c) write$P9_RSYMLINK(r3, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x10, 0x2, 0x8}}, 0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1a000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2166.828704][ C0] sd 0:0:1:0: [sg0] tag#704 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2166.839355][ C0] sd 0:0:1:0: [sg0] tag#704 CDB: Test Unit Ready [ 2166.846168][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.856105][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.865963][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.875782][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.885638][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.895457][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.905339][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.915159][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.925014][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.934846][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.944726][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.954543][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.964405][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:08:59 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:00 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2166.974215][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2166.984217][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.054439][ T32] audit: type=1400 audit(1583078940.112:66): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=7411 comm="syz-executor.2" [ 2167.200408][ T32] audit: type=1400 audit(1583078940.252:67): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=7474 comm="syz-executor.4" [ 2167.645487][ C1] sd 0:0:1:0: [sg0] tag#705 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2167.656173][ C1] sd 0:0:1:0: [sg0] tag#705 CDB: Test Unit Ready [ 2167.662843][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.672623][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.682418][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.692349][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.702133][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.711904][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.721580][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.731352][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.741122][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.750896][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.760668][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.770544][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.780306][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.790083][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.799832][ C1] sd 0:0:1:0: [sg0] tag#705 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.808676][ C1] sd 0:0:1:0: [sg0] tag#706 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2167.819323][ C1] sd 0:0:1:0: [sg0] tag#706 CDB: Test Unit Ready [ 2167.826064][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.835893][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.845681][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.855541][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.865315][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.875111][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.884882][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.894657][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.904435][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.914248][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.924039][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.933832][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.943598][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.953467][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2167.963481][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2168.492010][ T32] audit: type=1400 audit(1583078941.542:68): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=7857 comm="syz-executor.3" [ 2168.706828][ T7889] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2168.830869][ T32] audit: type=1400 audit(1583078941.882:69): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=7892 comm="syz-executor.2" 16:09:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000000000000000a000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b455b7331ec50674c0844f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000c05fb847d4e868ff000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x159402, 0x0) write$uinput_user_dev(r3, &(0x7f0000000140)={'syz0\x00', {0xc2d9, 0xa9ab, 0x2, 0x9b00}, 0x3e, [0x8001, 0x1, 0x5, 0x8, 0x7, 0x0, 0xdd, 0x2, 0x3f, 0x3450, 0x4, 0x80000001, 0x4, 0x2, 0x80000001, 0x7, 0x7, 0x3, 0x141f, 0x4, 0x8b4, 0x20, 0xdf, 0xfffeffff, 0x9, 0x700a, 0x4, 0x791, 0x8001, 0x81, 0x1a, 0x919, 0x401, 0x8, 0x0, 0x3ff, 0x6, 0x2, 0x10000, 0x9c42, 0x7fff, 0x20, 0x9, 0xfffffffb, 0x3, 0x3, 0x10000, 0x6, 0x20, 0x10000, 0x7, 0xd1, 0x3595, 0x3, 0x8, 0x7fff, 0xf8000000, 0x1, 0xffff, 0x7, 0x1, 0x6, 0x1, 0x1], [0x100, 0x2, 0x993a, 0x8, 0xd04, 0x1, 0x80000000, 0x8, 0xe5, 0x680, 0x4, 0x1, 0xe3, 0x3, 0x5, 0x20, 0x1, 0x2, 0x58a, 0x5, 0x5, 0x9, 0x7fff, 0x8001, 0x7fff, 0x0, 0x400, 0xedf6, 0x7ff, 0x8, 0x5, 0x40, 0x8001, 0x2, 0x3, 0x0, 0x81, 0x7, 0x80000001, 0x3, 0x3, 0x0, 0xffe0000, 0x1, 0x10001, 0x1, 0x74ad50b7, 0x4, 0x394, 0x3, 0xdc, 0x0, 0x20, 0x380, 0x6, 0x516c, 0x9, 0x0, 0x0, 0x4, 0x7fff, 0x41, 0x6, 0x33], [0x1, 0xffffffff, 0x3f, 0x1, 0x9, 0x1, 0x1, 0x9, 0xffff, 0x3, 0x3ff, 0x7ce, 0x7fff, 0x2400, 0x1000, 0x5, 0x0, 0x5, 0x649a, 0xffffff81, 0x7f, 0x0, 0x4, 0x8, 0x8, 0x8, 0x80000001, 0x10, 0x2e63e266, 0x4, 0x7fff, 0x3ff, 0x0, 0x6, 0x7c0, 0x1000, 0xffff, 0x5, 0x9, 0x0, 0x401, 0x9, 0xfffffc00, 0x2, 0x300d, 0xeaf, 0x5, 0x880, 0x0, 0x9, 0x0, 0x3ff, 0xeae, 0x92d4, 0x3, 0x4c, 0x9, 0x5, 0x400, 0xfff, 0x0, 0x3, 0x9, 0x6], [0xfffff000, 0xfffffffd, 0x609, 0x80, 0x3, 0x3, 0x4, 0xff, 0x3, 0x0, 0x316, 0x5, 0x7, 0x7b02, 0x800, 0x0, 0x96b, 0x2, 0x208ac7e5, 0x1, 0x6, 0x80, 0x6, 0xfff, 0x5, 0x7ff, 0x0, 0xffffff81, 0x541, 0x8, 0x5, 0x8001, 0x4e, 0xa6b8, 0x2, 0x1, 0x0, 0x1, 0x9, 0xffffffff, 0x8, 0x9, 0x7f, 0x0, 0xfffffff7, 0x7, 0x49, 0x5, 0x4, 0x5, 0x6, 0xfffffff9, 0x6, 0x3, 0x1, 0x0, 0xffffffff, 0x6, 0x3f, 0xfffffff8, 0x3, 0x4, 0x5, 0x8000]}, 0x45c) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[]}, 0x78) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000) ftruncate(0xffffffffffffffff, 0x200004) close(0xffffffffffffffff) 16:09:01 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:01 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c46000000000000000000f5000000000000000000000000000038000000000000000000000000002000000900000000000000000000000000000000000000000000000000000000000400000000f5ffffff000000000000000000000000000000000000f700000000000000000000000000000008000000000000000000000000009300000000000000000000000040000000000000000000000000000000000000000000000000000000000000002da821cf71b02d3eaba2d5adf3d8000000000000003c1b6b4cdcd00e250000000000000000000000000000000000000000000000000000000000000000a5b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ddad3200000000000000000cb8b50e600000000000000000000e7cf6caf4aa3a75652000000000000000000000000000000000000000000020000000000000000000000000009007b84aa84e804978a8ff6ad7b09000000000000ed50232c9731efd2ff84dc1c51f89a42447c9ee3e9730afa58a39b845c14cf672d2739bb3e7b5898d619f1e3c597db986feeca02fe605e2de6707b7773d9f2ac7d7db21d44134cb70a0fb3a6d7cd838b40611adfb575bb69f4db4d454497586ea6fcf29f2811f91e9b7ff750d6142aa5734bb65af99807488f349f7a1b31e1658fd29ae75c9b0ec30faabf8318f6affe13deb60da186e9330f7f00f8f1c341f304cfb156cc2fb8f478536a2b0fcc2d1c5022b2ce427ba0fe29f4ffa5abd70e5eb030554c04b0bc2b122fcd178838cdd80ba7b753c68c38a01ae77d14ffd6887b367f1b1eb25b3c9d247c138f93d8c241bb397ec97b3a59f1b346558301ace88de424a4e889166057400d3ba4bb35adbfde799c61a2ee84149bbc5ac94fd5bd54ac81899fec07cdc4a49c9da38e5c094b4ef38731655b188705b5040fcf02f12163de3886a550d21a3c1ea374ba1391f7621c2a28203eecbc4118dd52b36bdc9a61faa5c1fab12e683d38bbff61f2d7d0439b23e0bf558757eb4b999c43ab6faa0f279540a6e24655f40c9af557fde61a878b446b82213aff4413a22338927b5b4f7b60d1fbb26a202c92a1c9b4fdab51fbb4739abfe2638454c3ff3f402554d9af5dbec9046db526c6ebdd810bad66c5f6eac6fe2ca7d0fb4374c333963b5b7f9c4ac3b67cd90ca4955b6ece1b9a47dabccc372be7d323e7c46a3adb12cd1168cc7f3881fb9298d0af3c7fcc16e68808b5cb9f180c35df90ca"], 0x191) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:01 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2169.202055][ C1] sd 0:0:1:0: [sg0] tag#712 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2169.212900][ C1] sd 0:0:1:0: [sg0] tag#712 CDB: Test Unit Ready [ 2169.219453][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.229265][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.239028][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.248822][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.258617][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.268440][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.278243][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.288253][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.298030][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.307815][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.317578][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.327351][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.337131][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.346912][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.356691][ C1] sd 0:0:1:0: [sg0] tag#712 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.365602][ C1] sd 0:0:1:0: [sg0] tag#713 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2169.376276][ C1] sd 0:0:1:0: [sg0] tag#713 CDB: Test Unit Ready [ 2169.382885][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.392639][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.402415][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.412163][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.422714][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.432472][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.442235][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.452105][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.462018][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.471725][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.481482][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.491243][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfb) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) [ 2169.501010][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.510802][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2169.521443][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:02 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x21c100, 0x51) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000280)=[{0x8, 0x7, 0x8, 0x7}, {0x101, 0x0, 0xe0, 0xffffffff}, {0xf5e1, 0x5e, 0x9, 0x8}, {0x7ff, 0x7, 0xb8, 0x3}, {0x0, 0x20, 0x20, 0x9}, {0xfbff, 0x3a, 0x1f, 0x1}, {0x4, 0x0, 0x7, 0x1f}, {0x401, 0x80, 0x3, 0xd698}, {0xf5a4, 0x40, 0x9, 0x8}]}, 0xfffffffffffffe38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0044306, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x59bf02, 0x0) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r8, 0xc0044306, 0x0) r9 = fcntl$dupfd(r8, 0x406, r7) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000080)=0x7fffffff, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x2000000, 0x7, {r10, r11/1000+30000}, {0x5, 0xc, 0x5, 0x6, 0x9, 0x1, "2bdf3d75"}, 0x7ff, 0x2, @offset=0x74f, 0x3, 0x0, r5}) ioctl$PPPIOCSCOMPRESS(r12, 0x4010744d) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r13, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0xff31}]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:09:02 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x191) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:03 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2170.712001][ T8137] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:03 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:04 executing program 4: listen(0xffffffffffffffff, 0x800000000000401) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x620d99d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000016c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001600)="503dfef99cd65e6a50e21e216fc77366014219634c0366155c16ce2a7180a67e33698db3e9e0fd9db7a85ee3db2182c79b419545557bf6fb6c1414ae6bf9f47248603efff66b0d3fe168088995887cf85e1b8f4264fd39e2014475a3e076605b473e51ae02512dcf2a326b3f6887c499ef95181894e884a340bab76b349aab3388af6af35a682636160b88e5f0ba287aa4adbac5198f520637747d4e0be452eb905f37", 0xa3, r1}, 0x68) set_mempolicy(0x3, &(0x7f0000000140)=0x10000101, 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r2, 0x29, 0x33, 0x0, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x100, 0x1000, &(0x7f0000000380)="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", 0x7, 0x8, 0x4, 0x1f, 0xe76, 0x2, 0x2, 'syz0\x00'}) timerfd_create(0x1, 0xc00) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000015c0)={0x0, 0x1, 0x100, 0x1}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000001740)='/dev/video0\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000001540)={[{0x5, 0xffff, 0x3, 0x7, 0x92, 0x6, 0x8, 0xff, 0x5, 0x8, 0x69, 0x2, 0xae5}, {0x4, 0x1, 0x40, 0x5, 0x0, 0xfd, 0xaa, 0x9, 0x3f, 0x6, 0x1f, 0x6, 0x5}, {0x2, 0x8001, 0xdc, 0x8, 0xfb, 0xd3, 0x9, 0x4, 0x3, 0x5, 0x1f, 0x6, 0x80000000}], 0x5}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000013c0)=[&(0x7f0000000100)='#wlan0*$\x00', &(0x7f0000000240)='cgroup\x00', &(0x7f0000000280)='syz0\x00', &(0x7f00000002c0)='syz0\x00', &(0x7f0000001380)=':@cgroupselinuxsecurity.}+)user#ppp0\x00'], &(0x7f0000001500)=[&(0x7f0000001400)='syz0\x00', &(0x7f0000001440)='syz0\x00', &(0x7f0000001480)='{*(bdevsystemself,\x00', &(0x7f00000014c0)='syz0\x00']) [ 2171.016964][ C0] sd 0:0:1:0: [sg0] tag#714 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2171.027553][ C0] sd 0:0:1:0: [sg0] tag#714 CDB: Test Unit Ready [ 2171.034242][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.043985][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.053725][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.063538][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.073343][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.083105][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.092969][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.102736][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.112488][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.122207][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.131952][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.141650][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.146853][ C1] sd 0:0:1:0: [sg0] tag#715 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2171.151380][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.161829][ C1] sd 0:0:1:0: [sg0] tag#715 CDB: Test Unit Ready [ 2171.171336][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.177755][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.187364][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.197012][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.215320][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.225137][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.234900][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.244685][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.254445][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.264343][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.274121][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.283947][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.293702][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.303511][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:04 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0xf0e80, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000028c0)=ANY=[@ANYBLOB="d400000010003b0e00"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="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", @ANYBLOB="ac0012000800010067726500a000020008000600e00000010500170000000000060003003f000000060011004e240000050016f001000000050000000000080006000400141908000702e000003cd41ff30108005edb311f06000000000008000700ffffffdf080005000000000006000e0000010000060011000000000005001700"/144, @ANYRESHEX, @ANYBLOB="fb8d79f3080000000043c47fc7019bff070000222d4b194a98681ef6826e1249cf75e21baf7bf295baa866683f15af515497ec7200a29ab83b3eacb6a8ddc649e996886ea6a05bed321db64ea5f1d896f73b999f16f2ad6879bdb8059fe25db7b9371febee7c5927d16672cd3cb1a44bd8623a451125c906aa15bd0400c55f8330e5770c5e73531a643af6357d64f4fd652f7310f14bf534e3b9121104a6c5564e917d512930328f0adc05dba6f82871ef9a1db388e8d2c638683ac8d8f2d55f0821a1e62a3248633540cc8259b628"], 0x7}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 2171.313307][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.323246][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.333120][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2171.356426][ T8423] IPVS: ftp: loaded support on port[0] = 21 16:09:05 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:05 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c46000000000000000000f5000000000000000000000000000038000000000000000000000000002000000900000000000000000000000000000000000000000000000000000000000400000000f5ffffff000000000000000000000000000000000000f700000000000000000000000000000008000000000000000000000000009300000000000000000000000040000000000000000000000000000000000000000000000000000000000000002da821cf71b02d3eaba2d5adf3d8000000000000003c1b6b4cdcd00e250000000000000000000000000000000000000000000000000000000000000000a5b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ddad3200000000000000000cb8b50e600000000000000000000e7cf6caf4aa3a75652000000000000000000000000000000000000000000020000000000000000000000000009007b84aa84e804978a8ff6ad7b09000000000000ed50232c9731efd2ff84dc1c51f89a42447c9ee3e9730afa58a39b845c14cf672d2739bb3e7b5898d619f1e3c597db986feeca02fe605e2de6707b7773d9f2ac7d7db21d44134cb70a0fb3a6d7cd838b40611adfb575bb69f4db4d454497586ea6fcf29f2811f91e9b7ff750d6142aa5734bb65af99807488f349f7a1b31e1658fd29ae75c9b0ec30faabf8318f6affe13deb60da186e9330f7f00f8f1c341f304cfb156cc2fb8f478536a2b0fcc2d1c5022b2ce427ba0fe29f4ffa5abd70e5eb030554c04b0bc2b122fcd178838cdd80ba7b753c68c38a01ae77d14ffd6887b367f1b1eb25b3c9d247c138f93d8c241bb397ec97b3a59f1b346558301ace88de424a4e889166057400d3ba4bb35adbfde799c61a2ee84149bbc5ac94fd5bd54ac81899fec07cdc4a49c9da38e5c094b4ef38731655b188705b5040fcf02f12163de3886a550d21a3c1ea374ba1391f7621c2a28203eecbc4118dd52b36bdc9a61faa5c1fab12e683d38bbff61f2d7d0439b23e0bf558757eb4b999c43ab6faa0f279540a6e24655f40c9af557fde61a878b446b82213aff4413a22338927b5b4f7b60d1fbb26a202c92a1c9b4fdab51fbb4739abfe2638454c3ff3f402554d9af5dbec9046db526c6ebdd810bad66c5f6eac6fe2ca7d0fb4374c333963b5b7f9c4ac3b67cd90ca4955b6ece1b9a47dabccc372be7d323e7c46a3adb12cd1168cc7f3881fb9298d0af3c7fcc16e68808b5cb9f180c35df90ca"], 0x191) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2172.242905][ T8818] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2172.278834][ C0] sd 0:0:1:0: [sg0] tag#716 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2172.289467][ C0] sd 0:0:1:0: [sg0] tag#716 CDB: Test Unit Ready [ 2172.296162][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.305913][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.315650][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.325448][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.335185][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.344906][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.354753][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.364507][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.374267][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.384007][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.393740][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.403466][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.413180][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.422923][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2172.432652][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) set_tid_address(&(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0xb}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x401, 0x0, 0x6, 0x1, 0x9a42fc}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 16:09:05 executing program 4: listen(0xffffffffffffffff, 0x800000000000401) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x620d99d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000016c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001600)="503dfef99cd65e6a50e21e216fc77366014219634c0366155c16ce2a7180a67e33698db3e9e0fd9db7a85ee3db2182c79b419545557bf6fb6c1414ae6bf9f47248603efff66b0d3fe168088995887cf85e1b8f4264fd39e2014475a3e076605b473e51ae02512dcf2a326b3f6887c499ef95181894e884a340bab76b349aab3388af6af35a682636160b88e5f0ba287aa4adbac5198f520637747d4e0be452eb905f37", 0xa3, r1}, 0x68) set_mempolicy(0x3, &(0x7f0000000140)=0x10000101, 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r2, 0x29, 0x33, 0x0, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x100, 0x1000, &(0x7f0000000380)="c82d2ff2707bb103a875cd50b65fbf7853c754f235cccc785597d10d4b0038283722a4a2e84e5d2cf8da35172cbe3db6ff3eec93d7248d0863943b26871b3b76ec94e706eaa35b1fff837ebdd47af5b47506e662891b9c0bc51370b7d600d134280d4345ed143ab247dc29f960a3d4289ee067cc665ecb7afbbaaeb37fea3385210375bc0782c98bbbf0898480d4ee8bce251103cb5d8e3537eeb327420102d2665018b7567c69c9e8912e54e6f56bc3417a0f43e6b49b4b36446e9fcfa7cbbab23afd6264e9103937b3c96bdf91df0b66933d158a09d8773bf3704a99c4e7c98693c3000b5aa84db74660b49d4acac734e90be7d6bd9272b2ce9fd958c4a206fca1c2e38c3d4aa6f8966f319c9e364a6f79699d0f6f7c70861d289dadc303532fd51388bb760446b0cfe0504f172047e0c790b0ce115846abf43d5f19b04feba0271f651ef65ba220184e6af157c58bc57505f9ce0d1ea74771176c4368100311c608883135c791f258a78b017ff77515fbc5ab3fa55591be10c7e5cc5ba5a9583617900004a1c4d06c131092138aa7e5fc66e97afb833ff7468870f9c0c5f8b14843f5e3b0d80b55913fff7d642621859bac1393a4c4cc1aa06d7bfea73e5accec94058eee25cfdbe54a3142d5665187d5915f0fd44f5d8fd8849ab0781057dc75c8183a78f4bdf57ac44004ace89b873b87b8c4aa53da93366bd727608fdd64f6b908601d2eb0752fef04eae04ea9ea23c7954e2c04a3bc3755e99e718941d1f88d4836af188cb3b9a9215972a7642dedba7c092157fa233709f0ced5cfe262385230834149c57825fd770dad9c997679c6a7c7c8cceee1cadd8a7ccf058db8f46876748010c61c15c1cdcc02e064cb66b83e54feae1c28c465f38b3aa82f98b99dadfa9dd24e6bf328f3a40912a4e744c9efb48d0c04590b929b2cce89763bcd03508cd51a82c276035ceaee753aff97aacc1080bc9d1fc54816004f984e2ec9e19928ce560ba94399cd1fd3cfdc3b34b9fb63596920898999c91b755b8855fd9298e1d95f0b4e195d046f9f04de7dee799375c9ad2baca9a20642077e4eeba0f3de342e743c6cc28a51cc9223d15774399fbdfc6965f5e3cfbfabb59b01e3e7862c7e5e663c5785a3347a7d7cefd40f0e17520f275380230343e6403b2df8f1eec6d6b26e0e4083eca63a999c04cc6e2028ed16b4fc9417ff563cafb4983a395c52e5116ec58451fb7928b21a7407219177e5f1f197e445b26e91cf561039dfef73b559445eec0914b50bab8189f7286a6cbf53e37e43a95342a3f3f5b2cb06aae7e510302d1ca77584f3f1594fec41c7d15eab7d62f3d9e247c4fbf287010820dc02d811aef6c7504a95f8c4ae4af475213e7d5f141c70296628c47c281353c4baff041e398d9d9a2bdca61d4084bce70d9364195751d68956c43497b526c0e35c434ed403bceba81f6b682804ea97b38682f9fb8eddd93e89f80bedf0bdec79c78ee2cb444b3f141195120722d675469600cebbf614db2053ad8bd559649d27488f46cc1cce456408f0cfdbc3697faab2702a8d0244ac5a1307ca7601fa857680461cc7292b841be9378a599ebc02ceaa7feab52afdda3a9aebb1f3eb6d946ac826fd7ea4508d670be0383484fdf45cf8950c536796f5f9e28ada8ee4c14959eeae08185ca4412160f03f8d6c2c92ae71b0b2fe12f8fa32f253f87f124354b73c526f719a78b4a7af4aa55fbeedb94675dbb1f539735bbadc843e275d68e8a26fbe10cccb084463cd6f3a69646cdc4279480c0978451f38c6f9661c590e880d73e2aee6dccd553274443a6f964dd18df4dd00ecf3c90501a86e04b757cdcb31db54d904a5d176a75e5dc8e7282476e7dc20f80355cee4093087f09b5c20690d276f5fd9090f72df8ff2b1695247dd309d113d7279c5704ca70f6f1dc7635c5edee1e566f9c5cffd27a62a9bce753325347daf81bc0cfa43c79fd28b3d85422e4d09e6260cb0a00eb51868a1c8fa7babbdd74e51ffc854d14d4c1c662c76ebba32ab041b94eb829c347b26de5a52e27246056204ad73a3975d10a4d8c8a589e593831e778263f3735ba46d6c8633d5cc9d2d430755df2a23397ea1b5989ddc2dfbce1f10e1428710c58705c71e85d35461c3a28f0f745c8707c165ed346a17c4288978392620bba32bb852b5089ad55a6c1f6010dab6b09df76f37c1709f6dae90cdeeafe2bb1a4f97a133b2014c43ec6f59b4ee2015fbddd023daf0fa7be931e7e13f3290f2680fe5d7a43120180776a18c89b72be098c8a4c38a6790132b3a74ebe6412e646e8fb7103873085f17e2e1d7dd7344d30459f632931b58baeefab31748f3ccfc210cd9daa6f562b2ccd82e1bc5dc3be8d1f4bc40eec1066522c43b03a46a1f452c5cc11d28dfcfac209e2b5d380760404596a3fef228d8dfc962b863cc8b30318f8dcee8694294ca7434657d3949745c9d8e5f0c9859da1a9e9ef39bace758e346360471b325b38cf9d5c2072187a6d63c6a9aa015e98868dec2026adcfe335095bd78464fd11ac7198874da878a312052adf7233764f95d5211acdb90fa888f5d5fe79ccef5ae29e5e38941c228223d75f6d3d5c8901be9eeb2ab80257ff66579c84d0b8c3e5dd7be6279f3ebb777b02a2f094bf3fd40a8267b594f73658481120d0dde3221b462a1201774d7da0a336617febbc79041d490f237badc8245ba7a63b6be1abc40cfa1cb1bab1a9ec1b0055294c9750215cbbff4488ef5cfecadc760e76eaa4109e495bfd679751d309091d36c303af0432b0bfe8010c431cc2f3e6c3cce99c09d0c05fddf67e489972b75572ca073a6c8d6f9c13e4ba445fa146b53a6c7ae605356c65b7541ecacafacb5948220d7df9b9e472c80c623b572287370e6c17e6f3c6bda25c7656f8972d6e8f3cd1c1e1777a3acac0b935209ed2594ad526590bd98ce29f03fefe3e6d9b3b296de885267928b57e0b1a951a36aa94d3b7dd89ce716ef3d50764d0f35f453ed808ab2f9c1a8749ce6ebf12c11d8325355e85b01fc981502929ab9604d1b351e097c449fa3c0221031ed0623b9952482feb8316ec8dc84c1004ceba8fd9840974b8690ae1437290088ad5bddab902ac0eb2938fb961b1c426080d14620af85756b2471d53a54351f0aabbcbaa4829f1f49e4a5a443505a0eecd65d840804d189349fcfe9f27a8c07b814285ab186b9374e32d295d65894af28dd0328df2dcb0928949488b4c6751a025f1aab0cf1dc0976b1aa00a68cbb3d7289b8ce83f6b8bf166ed8e9574f05ce928993f09fba0264b6db365fb3e2ebd8112a44ddc7668bb3f3baeabe6ad8376d1c8becd73bc920e9b60891ae05f48c601ae8d331f77aa713e8db93c22550f4b140ba524c42858a1065c7d9831388c2fc11c1727c5e322ae04b791fc0fa5aeb27ae6e2ab3e9dc799506a64a394ecca5059a72af2e45f70b1a56d381c18ab2cb376c81726b9f631109e45612cf0becf68b7a7c9813555bbb5ac9371d363b3e42979bb0f337cba2c192834957928a9df555377e8397c4d8e9b61e05ab36e517e14d45a6b3dfc9c37f343ff2b98b29c21c5723642fc71c628b0bcc18a8d5aba21888f7b7d2d3148df52bf0963ed692995c35f17bd537dc9d83b076a7ec9b43d197babd824ee99ab33425fbe4089987635403adfa6d1c88cb305a90574fdd288adcac165ccf8ad7dcd2df5aba684b12c09f92e25d789886e87eb46cd7df714aa43bb9e0e00c89a420ed17f9a95a03fe902a1a78a52adbbf196d7ddd82e6f1fab7346f08a4137c6a83c6d832b109dd59c983db669e51118d9c8f10738ff8b1ccd92486b743c45399ef4446972e7068d779f01badba91a75ff25092949750d3787f88dc766ba8aaeb88af114225381acf5141d4325410405200c1cb0ec7e9fa53acad27423da23d2de85be76e4f7374126ad8e199314fb0770a5acabad0a1cec352c3a5057e42db574722773504143ef1c7e47909c9fdf3829a026050616c792ac7b866e1ad357aba7bbdcc941c4c2feb9ddf83911a0656ee6c3c68c4cbcdfb14136a0d17d6551fa241037f8c63ed2536bd39048a1985aeb8a2e5fa73ef431d1188dba1f2fc09858a63f2f56617d786fd06e1ad4398af8f7f5cdf0385d293b152045ebda30b96ca96c17d245914e199d4e58f46994d81dae3f637ba921c6f74b69036a06653758ddaad864518043efda5593a3e6f8a74bccd40022c222bf196b8cc2a30d6ff06d42de902b5596d1a635c3a7c999de9e806dc1668fb8a62e53274ba78ef425c08f91dcc95c871590138c7f8b2479af26be8343803b1bbf010fd26dea244630c9cee1389143f21cd9fadbab9de3d219e92983713a1ebae523b4f7c335f802afc00c895442c86aaa7f4f616201cefe56445fa52a331dbd13f523246ccea252a45fad0196ea17b5b7d56f7bd316b8e72479d71812e4dcf98343998c84f4631bb5ced993badced591b2c5d5b66dbdcc1dc734e5220d13689d52b21b5895c09e3091824a42b481dbe88e6b1a14a7070cb711281e95c71b0e7ca8f20923b092a5a368d859b6b5d59275fb688235562318fddfebfc755961f31df87688a1e0121a1f7b1318ddbb57fcd67c2ef026e3e7a2d600dbc5ed9b67e038405f151b91a9853eb066538aa3ee9aac94403ffbf895df8e946d9596acdc0957690ace12eb7f698b5e4504d7797f9be02b58e87616f94ffef4b4fce1641ca8d671a1182d439654a9ca487d20e724e310e76c0aa1be0791d53a3d53c856103a4d94a147a3c4475f2d87a272e3ad8aa02a45b4659c1eae84567af572da74385b4cfd4b1a4a81d6700cb422f5b8a3a682d4ac722a60acc84ffab84f6f333e0e1f37fd2bf09d6fd39f7a5341ee61dfdaa785ea819db9371952b936e770b67f1c45a6b6897f2d7fb41fe30c31cb609846a7716ace28c75cb51cbf281790fb9cb04981b9187a0a11f715150664765f674fc80af57e748e838e55b3ce0b9375bdbfddce692d80f485a08bae6dca71876bc0c0f419d934faabd743d3bf8b4949c15e81b71c08f7cf3198fc32032148421df2f50e9567b0274c29eff3ff1a1345d9a6a1c6d1c111b5a147cf4f05c8e1e6e41a7616f1d5fd52a9dc333e92d1259489e2af46f619e1c519ad4aeedd345a1f5e1e81934fcc6940550be151996fd7aae65f45903b43da433e631190f36809fceeb45a29ecaa05d428bff80f9e4d5a095a8f55d40ffcef5dc02df24bfb81e5b460c4b9c62cf34211ba5eb904c04d949192baace6d71cc86aa35d4397b40701de57fb78c2fdad47b0990d2667817eb2faae68dedcaa0396770d8e7079acc2533eca7141fb478fcfe7c8dd15dd4aec868372d0ed1abd10d6094f22bee735184d47f698a76b39834228fc92579dd78c5f38a3793d69e723fde48d507aabab1842ff1f54d37d1f9e3e4df24a96dc1e0096a2a4100fed841e09913a67486a0718f8ce9cd57c1df4c1e8f59c441ed02acbb67d4ec452b67506f08efb2f1ae4a4e55cc882238e44873515d95bf93cde5c72cb07fb6776eb9e1dde54c0be9740979e475029813f71e924baf13d8e610645f04a6d18978bcbca04d7486a7c68c2571c6d412d3ea03c411a9dad6551022d894e4a3cc49b124d6874970659198c40a63231421c33e5f29a3db9e71828b4bd8d27e17517b347750e17f7c987091adb8a763656a1303c8a4ed56443405c8829c91cf6914de9a93f27382c3ebb6758681f394d665e1a56d79c5bc90e22a1dcf5cea6cecc643c3e5ef5b9b1c1dc", 0x7, 0x8, 0x4, 0x1f, 0xe76, 0x2, 0x2, 'syz0\x00'}) timerfd_create(0x1, 0xc00) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000015c0)={0x0, 0x1, 0x100, 0x1}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000001740)='/dev/video0\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000001540)={[{0x5, 0xffff, 0x3, 0x7, 0x92, 0x6, 0x8, 0xff, 0x5, 0x8, 0x69, 0x2, 0xae5}, {0x4, 0x1, 0x40, 0x5, 0x0, 0xfd, 0xaa, 0x9, 0x3f, 0x6, 0x1f, 0x6, 0x5}, {0x2, 0x8001, 0xdc, 0x8, 0xfb, 0xd3, 0x9, 0x4, 0x3, 0x5, 0x1f, 0x6, 0x80000000}], 0x5}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000013c0)=[&(0x7f0000000100)='#wlan0*$\x00', &(0x7f0000000240)='cgroup\x00', &(0x7f0000000280)='syz0\x00', &(0x7f00000002c0)='syz0\x00', &(0x7f0000001380)=':@cgroupselinuxsecurity.}+)user#ppp0\x00'], &(0x7f0000001500)=[&(0x7f0000001400)='syz0\x00', &(0x7f0000001440)='syz0\x00', &(0x7f0000001480)='{*(bdevsystemself,\x00', &(0x7f00000014c0)='syz0\x00']) 16:09:05 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2173.046299][ T8936] IPVS: ftp: loaded support on port[0] = 21 [ 2173.108108][ C1] sd 0:0:1:0: [sg0] tag#717 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2173.118892][ C1] sd 0:0:1:0: [sg0] tag#717 CDB: Test Unit Ready [ 2173.125614][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.135383][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.145325][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.155098][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.164842][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.174734][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.184475][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.194239][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.204021][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.213774][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.223520][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.233286][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.243066][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:06 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2173.252823][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.262568][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.308421][ T32] audit: type=1400 audit(1583078946.362:70): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=8937 comm="syz-executor.5" [ 2173.734925][ C1] sd 0:0:1:0: [sg0] tag#718 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2173.745525][ C1] sd 0:0:1:0: [sg0] tag#718 CDB: Test Unit Ready [ 2173.752198][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.761959][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.771629][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.781454][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.791235][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.800993][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.810772][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.820562][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.830383][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.840163][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.849934][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.859722][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.869488][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.879260][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2173.889022][ C1] sd 0:0:1:0: [sg0] tag#718 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x8927, &(0x7f0000000100)) 16:09:07 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(0xffffffffffffffff, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:07 executing program 4: socket$inet6(0xa, 0x3, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0044306, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100342df221785dd8bc180000000000eeffffff00005c0000000400e70000005f007d8b6ce4eced32da525c603c3ffb1e8640f2b0362159d06d49a1cf3c996c43622619325de8fed6a4c9a53cf6e5173f66e1b418fd3f1e436a7b0886e8e9cd3d6c7e8cd912b9d51e2ff47c17efd2324c1f83b1ba1c8668b068724e7cc16ce7cf47aabbbb24681bfa093287451e2c45e7224d00115b53b9b472879a34ae5aa0cf07a4"], &(0x7f0000000100), 0x1c, 0x0, 0x1}, 0x20) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x8, 0x2}, 0x24}, 0x10) open(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) [ 2174.717391][ C1] sd 0:0:1:0: [sg0] tag#719 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2174.727970][ C1] sd 0:0:1:0: [sg0] tag#719 CDB: Test Unit Ready [ 2174.734612][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.744355][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.754216][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.764119][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.773924][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.783691][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.793561][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.803323][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.813093][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.822872][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.832634][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.842412][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.852178][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.861939][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2174.871608][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:08 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:08 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2175.139206][ T9415] x_tables: eb_tables: arp.0 match: invalid size 56 (kernel) != (user) 0 [ 2175.481987][ T9573] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:08 executing program 4: socket$inet6(0xa, 0x3, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0044306, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100342df221785dd8bc180000000000eeffffff00005c0000000400e70000005f007d8b6ce4eced32da525c603c3ffb1e8640f2b0362159d06d49a1cf3c996c43622619325de8fed6a4c9a53cf6e5173f66e1b418fd3f1e436a7b0886e8e9cd3d6c7e8cd912b9d51e2ff47c17efd2324c1f83b1ba1c8668b068724e7cc16ce7cf47aabbbb24681bfa093287451e2c45e7224d00115b53b9b472879a34ae5aa0cf07a4"], &(0x7f0000000100), 0x1c, 0x0, 0x1}, 0x20) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x8, 0x2}, 0x24}, 0x10) open(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) [ 2175.581547][ C0] sd 0:0:1:0: [sg0] tag#720 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2175.592198][ C0] sd 0:0:1:0: [sg0] tag#720 CDB: Test Unit Ready [ 2175.598747][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.608545][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.621585][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.631380][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.641118][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.650903][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.660639][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.670402][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.680144][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.689948][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.699684][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.709491][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.719225][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.728957][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.738701][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2175.803206][ T9615] x_tables: eb_tables: arp.0 match: invalid size 56 (kernel) != (user) 0 [ 2176.089319][T17007] tipc: TX() has been purged, node left! 16:09:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280080004000000000004001200ceeb283e17d695ef5d322cda3d3c78983a4c190d67d9a555c4d43e355b35870b6868b622c9fde68203a3da8d1c582c96aa8c99f8c895f43471dddc70e7b8f76d94a9db8deed99f92443704df0b52"], 0x44}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x9, 0x0, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) 16:09:09 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) pwrite64(r0, &(0x7f00000001c0)="b1", 0x1, 0x0) fadvise64(r3, 0x0, 0x0, 0x4) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0044306, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'L+', 0x4}, 0x16, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unlinkat(r5, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000140)={0x0, 0x401, 0x0, 0x73, &(0x7f00000000c0)=""/115, 0x30, &(0x7f0000000040)=""/48, 0xf7, &(0x7f0000000200)=""/247}) 16:09:09 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) 16:09:09 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2176.570720][ C0] sd 0:0:1:0: [sg0] tag#721 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2176.581341][ C0] sd 0:0:1:0: [sg0] tag#721 CDB: Test Unit Ready [ 2176.588089][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.597827][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.607583][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.617384][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.627112][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.636839][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.646580][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.656334][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.666120][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.675899][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.685695][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.695423][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.705174][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.714939][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.724675][ C0] sd 0:0:1:0: [sg0] tag#721 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2176.783760][ T9888] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:10 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) [ 2177.286600][ C0] sd 0:0:1:0: [sg0] tag#722 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2177.297270][ C0] sd 0:0:1:0: [sg0] tag#722 CDB: Test Unit Ready [ 2177.303960][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.313702][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.323432][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.333224][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.342949][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.352691][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.362437][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.372166][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.381911][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.391587][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.401436][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.411336][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.421099][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.430848][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.440590][ C0] sd 0:0:1:0: [sg0] tag#722 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:10 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(0xffffffffffffffff, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="3308000400000000fe8000000000000000000000efffffa9377d45c5731252e03addfa612ad9d527fe8000000000000000000000000000aaff930000000000000000000000000001"], 0x48) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r6, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r7}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r7, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e21, 0x380, @local, 0x7a30}}, 0x7, 0x8, 0xffff, 0x3, 0x1, 0x9, 0x3}, &(0x7f0000000140)=0x9c) r8 = dup2(r0, r0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x240, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x2000000000fff7) mlockall(0x2) io_setup(0x1b49, &(0x7f0000000040)) 16:09:10 executing program 2: getegid() lstat(&(0x7f0000000680)='./file0/file1\x00', &(0x7f0000000780)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r4, 0x5}, 0x8) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="3308000400000000fe8000000000000000000000efffffa9377d45c5731252e03addfa612ad9d527fe8000000000000000000000000000aaff930000000000000000000000000001"], 0x48) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x4000001}, &(0x7f0000000440)=0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e21, @rand_addr=0x3}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x40000007}, @in={0x2, 0x0, @multicast1}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x8001}, @in6={0xa, 0x4e24, 0x81, @mcast1, 0x3e}], 0x74) sendto$inet(r9, &(0x7f0000000140)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x4, @broadcast}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a68a0200cede5f5921147df4fdd62a99e881342b75bda9781f03bd5ff85b0154a665e1ceb2905cc2b09dbf71c123dc4c258dc737968aa3b40e9c3b276deea347ac82798dcfc2a2c393712b43c7cb411902100bd9b3389265d1065b3aeab6e45fdd7a9c77435114af52a1c9dfcf546a721dd3541bb9e388416cf313cdce17994947c03e3777a383938c49b78ea2fd0007c5c578abaa9f3a2efa9a72e14e169552a426930b032cd23ae649974bede03ebbdf398d685887c3f361c918b37252d50642c272b53a88def74f68b358e5e5ad8841582091ed"], 0x28}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000780)=ANY=[], &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r11, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xce, 0x1c48963f684a34b5) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) [ 2177.661051][ C1] sd 0:0:1:0: [sg0] tag#723 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2177.671642][ C1] sd 0:0:1:0: [sg0] tag#723 CDB: Test Unit Ready [ 2177.678339][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.688109][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.697950][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.707780][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.717585][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.727384][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.737223][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.747116][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.757007][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.766809][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.776628][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.786407][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.796227][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.806003][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.815809][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2177.868859][T10188] IPVS: ftp: loaded support on port[0] = 21 16:09:11 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(0xffffffffffffffff, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:11 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) 16:09:11 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$LOOP_CLR_FD(r1, 0x4c01) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/hwrng\x00', 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x200000}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40000, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000000000000000008006cba67b4604e67551000000dd0d00000000000019000080ad050000000100004000000009000000000000000d000000090000000300000004000000030000000000000001009e60a07affff369000000000c0ca0900000000000000000000803a00000007000000090000007f0000000000000001000080ff0100000300000001000080cd0a0000000000000d000000411800000100010001000080f90b000000000000"]) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1f0000004d6cef3a6605ebea58aa8a3f423b7892a6a5fae56b6b6bdbb7037c102d533ea916564d5ea3d45250fc75cb7e48e3395582f0a2013e71811ff35a2c075c33650d12447ed291634df9f7ee5a77124e1e6af6383da59e467952e076e271b46bc6ed65f3713bc9ca2c0eb6073b23bc41feccd5c2bfcd480056c4dcf5e1cd2e1b4aadd4ce2c8b574f8c67a15a3f9242f636c3176a56e01bc1bfb6cc54c8a90b96a2a64b852da80fc1e77255c5e58f03aafed2f6bc39e6c97d8b02000000a133b6b0e05ffd4e4360b14560eb5b077c57a1007d1c2319b4165fb7522b295ce97d8c0cc4ff66612948a78f9218d3240d6fd871ad", @ANYRES16=r9, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x20048800) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x10005, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x11, 0x2, 0x0) bind(r14, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r15, @ANYBLOB="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"], 0xc8}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="bd4c27e338948e006e739b31774a31f3908d332013", @ANYRES16=r12, @ANYBLOB="080427bd7000ffdbdf252000000008000300", @ANYRES32=r15, @ANYBLOB="08000100000000000c009900ff7f0000010000000800010003000000080001000100000008000300", @ANYRES32=r16, @ANYBLOB="0c0099000600000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x15}, 0x200040c0) [ 2178.612036][ C1] sd 0:0:1:0: [sg0] tag#724 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2178.622612][ C1] sd 0:0:1:0: [sg0] tag#724 CDB: Test Unit Ready [ 2178.629170][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.639044][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.648842][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.655692][ C0] sd 0:0:1:0: [sg0] tag#725 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2178.658648][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.669050][ C0] sd 0:0:1:0: [sg0] tag#725 CDB: Test Unit Ready [ 2178.678639][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.685126][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.694761][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.704433][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.714018][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.723670][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.733293][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.742866][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.752456][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.762020][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.771567][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.781175][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.790773][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.800340][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.809962][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.819633][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.829202][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.838783][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.848373][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.857945][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.867528][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.877104][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.895269][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.905004][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.914737][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.924469][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2178.985495][ T32] audit: type=1400 audit(1583078952.042:71): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=10381 comm="syz-executor.5" 16:09:12 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2179.051127][T10408] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2179.233278][T10504] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2179.445865][T10519] IPVS: ftp: loaded support on port[0] = 21 16:09:12 executing program 2: getegid() lstat(&(0x7f0000000680)='./file0/file1\x00', &(0x7f0000000780)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r4, 0x5}, 0x8) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="3308000400000000fe8000000000000000000000efffffa9377d45c5731252e03addfa612ad9d527fe8000000000000000000000000000aaff930000000000000000000000000001"], 0x48) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x4000001}, &(0x7f0000000440)=0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e21, @rand_addr=0x3}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x40000007}, @in={0x2, 0x0, @multicast1}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x8001}, @in6={0xa, 0x4e24, 0x81, @mcast1, 0x3e}], 0x74) sendto$inet(r9, &(0x7f0000000140)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x4, @broadcast}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a68a0200cede5f5921147df4fdd62a99e881342b75bda9781f03bd5ff85b0154a665e1ceb2905cc2b09dbf71c123dc4c258dc737968aa3b40e9c3b276deea347ac82798dcfc2a2c393712b43c7cb411902100bd9b3389265d1065b3aeab6e45fdd7a9c77435114af52a1c9dfcf546a721dd3541bb9e388416cf313cdce17994947c03e3777a383938c49b78ea2fd0007c5c578abaa9f3a2efa9a72e14e169552a426930b032cd23ae649974bede03ebbdf398d685887c3f361c918b37252d50642c272b53a88def74f68b358e5e5ad8841582091ed"], 0x28}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000780)=ANY=[], &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r11, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xce, 0x1c48963f684a34b5) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) 16:09:13 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2180.346636][ C0] sd 0:0:1:0: [sg0] tag#732 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2180.357251][ C0] sd 0:0:1:0: [sg0] tag#732 CDB: Test Unit Ready [ 2180.363897][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.373632][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.383361][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.393173][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.402889][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.412615][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.422353][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.432090][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.441826][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.451489][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.461200][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.470931][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.480675][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:13 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2180.491128][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2180.500855][ C0] sd 0:0:1:0: [sg0] tag#732 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:13 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, 0x2, 0x7, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PORT={0x6}]}]}, 0x28}}, 0x4000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="270000002e0089", 0x7, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x0, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00\x00l'], 0x1}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 2180.824181][T10721] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:14 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d3, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800900020073797a30000000000900010073797a30000000000800034038706ba20000000022000200b76312c4110dd9b17379e728147a000000002a5c47129397cfa337ec04800000040006140004800900010059797a300000000000001400000011006d3072e0486d698c3cc1dcbb531fc628a16e90016c478a50083a73645a6dc4b5345d2c0db7490000008fbc9cc6fb9e8e31fad7e7580e6ae4358d8f9509000000dc6e3af5cf3ed7aa68b191fea46766e9a1b3b4c9b075f74c1047e7981f804453898a0b8f9d081af6437d4051a31effff784421e478a6e04e0f3469ef95f289ff35a24334ba0d5ac037028b665900000000000000000000a988c4424fc91a25f646bcefe74afc7f8e5fe99dce00203bde387769d745b2b451684b6c806882d73346e8c151bd6c849112a918188de71414282e6acf3211f936569ac49baed8de6b6dfa8478eb72a36cf709bee7c55720d0ca2217685c4ed5451a"], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8a, 0x10100) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) 16:09:14 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2181.079458][T10823] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 16:09:14 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2181.370163][ C1] sd 0:0:1:0: [sg0] tag#733 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2181.380764][ C1] sd 0:0:1:0: [sg0] tag#733 CDB: Test Unit Ready [ 2181.387478][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.397252][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.407129][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.416911][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.426812][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.436748][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.446590][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.456360][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.466202][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.475996][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.485848][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.495623][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.505448][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.515417][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.525240][ C1] sd 0:0:1:0: [sg0] tag#733 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2181.584428][ T32] audit: type=1400 audit(1583078954.642:72): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=10936 comm="syz-executor.5" 16:09:14 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) [ 2181.963308][ T32] audit: type=1400 audit(1583078955.022:73): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=11174 comm="syz-executor.4" [ 2182.381507][ C1] sd 0:0:1:0: [sg0] tag#734 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2182.392267][ C1] sd 0:0:1:0: [sg0] tag#734 CDB: Test Unit Ready [ 2182.398842][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.408805][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.418608][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.428427][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.438189][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.448007][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.457805][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.467605][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.477414][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.487237][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.497011][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.506953][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.516807][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.526628][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.536416][ C1] sd 0:0:1:0: [sg0] tag#734 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.545291][ C1] sd 0:0:1:0: [sg0] tag#735 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2182.555825][ C1] sd 0:0:1:0: [sg0] tag#735 CDB: Test Unit Ready [ 2182.562512][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.572276][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.582076][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.591909][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.601641][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.611445][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.621228][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.631031][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.640999][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.650794][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.660560][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.670355][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.680121][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.689926][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2182.699676][ C1] sd 0:0:1:0: [sg0] tag#735 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:15 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:16 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x0, 0x0, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2183.233009][ C1] sd 0:0:1:0: [sg0] tag#736 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2183.243672][ C1] sd 0:0:1:0: [sg0] tag#736 CDB: Test Unit Ready [ 2183.250344][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.260952][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.270913][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.280864][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.290719][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.300574][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.310522][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.320375][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.330234][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.340071][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.349995][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.359885][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.369773][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.379636][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.389600][ C1] sd 0:0:1:0: [sg0] tag#736 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2183.434581][T11381] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2184.159157][T11534] input: syz0 as /devices/virtual/input/input21 16:09:17 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl(r2, 0xfff, &(0x7f0000000040)='\x00'/11) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:17 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:17 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2184.490648][ C1] sd 0:0:1:0: [sg0] tag#737 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2184.501255][ C1] sd 0:0:1:0: [sg0] tag#737 CDB: Test Unit Ready [ 2184.507936][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.517737][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.527512][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.537413][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.547269][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.557164][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.566925][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.576846][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.586619][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.596410][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.606202][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.615987][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.625780][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.635539][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.645413][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.664904][T11635] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2184.950955][ C0] sd 0:0:1:0: [sg0] tag#738 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2184.961580][ C0] sd 0:0:1:0: [sg0] tag#738 CDB: Test Unit Ready [ 2184.968242][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.977979][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.987753][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2184.997567][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.007379][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.017120][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.026909][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.036699][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.046475][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.056206][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.066012][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.075785][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.085667][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.095459][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.105278][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:18 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0044306, 0x0) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r5, 0xc0044306, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r6, 0xc0044306, 0x0) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0044306, 0x0) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r8, 0xc0044306, 0x0) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r9, 0xc0044306, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001280090001007663616e0000000004000280", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=r5, @ANYRESDEC=r0, @ANYRESDEC=r6, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES64=r3, @ANYRES64=r7, @ANYRES64=r8], @ANYRESDEC=r9, @ANYRES32, @ANYRESOCT=r3], @ANYPTR, @ANYBLOB="d7afe154e748770bfd66bb7b75b7e6135d84fd486071109ff31af0951d7f9fce85b3f804f44b0ff8472ac4687d97768f26ba1696ce497d18732549a43dc868e3f204e1461f964d64c9c6961bfba97182191ca0433a57e4a833c5572b406e40ca95c02653bb645e9a92a576c7b5cdc44152ca14b36427124505a959a138927dfc1a1b4dac3bba28636194885994498e588fbac19524b0ae6e9e86f93c3797f990c7bd067721ccb834fa0e51ba6011c36a10baec9999234436ea19bc54e60d7aa71c962aa7593a545aa1d238a9a249", @ANYRES16], 0x7}}, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x2, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c0ae6ea536f13681ba1545182dc8000000150001", @ANYRES32=r12, @ANYBLOB="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"], 0xc8}}, 0x0) r13 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r13, 0xc0044306, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0x10005, 0x0) r18 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r18, 0xc0044306, 0x0) r19 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r19, 0xc0044306, 0x0) r20 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r20, 0xc0044306, 0x0) r21 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r21, 0xc0044306, 0x0) r22 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x602a40, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r22, 0xc0044306, 0x0) r23 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r23, 0xc0044306, 0x0) r24 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r24, 0xc0044306, 0x0) r25 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r25, 0xc0044306, 0x0) sendmsg$nl_route(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000100010000000000000000000200000031591955e2ce592f9cf4caccf9115fc5e991dda13467f45196d871509b7e6916c13acf26dbe241e9ad585cd3bd1fb46a1a22fc41e50d340c5cbd4960ed0357b3ea19422ec00d53f5beb6ba537741860d5c25bf50ea5dc117517749148b6419c959a02eb1e7", @ANYRESHEX=r13, @ANYRESDEC, @ANYRESOCT=r1, @ANYRESOCT=r18, @ANYRES64=r3, @ANYRES32=r2, @ANYRES16=r19, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESHEX=r20, @ANYRESOCT=r21, @ANYRES16=r1, @ANYRES16=r22, @ANYBLOB="bd26b9fd45a17cbe4c723385637ec73916a79c0a65b0edb728addc37d97b8d231f9bc524a36e54935ddb00a2926482ce9c5e6ca560bd1f8d6561319bc236ca1663cb3ccef4682f71a326e9ee01f8844010cb81f48a345502a4d2e69e2f75d8e138b46c3bfef06c51fb37ae46ffe6669fdddf8ce1fad0251b57eb9ecd0d9fdef2b61f", @ANYPTR, @ANYRES32=r23, @ANYPTR64, @ANYRESDEC=0x0], @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYRESDEC=r24, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="f91f64134eb06b969f1d009a8f2bea4c2767598ea1ec9ced242b05e2bce76934ad18244bbccce833a1f6759e2e98a4e75d555cdbd21f9aecbee3f2b24cedde6243f167", @ANYPTR64, @ANYRESOCT=r2, @ANYRESDEC=r18, @ANYRESDEC=r25, @ANYRESHEX=r0, @ANYPTR, @ANYPTR]]], 0x9}, 0x1, 0xf0ffffff, 0x0, 0x8815}, 0x0) [ 2185.620857][ C1] sd 0:0:1:0: [sg0] tag#739 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2185.631487][ C1] sd 0:0:1:0: [sg0] tag#739 CDB: Test Unit Ready [ 2185.638176][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.647946][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.657681][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.667481][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.677255][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.687027][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.696814][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.706563][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.716310][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.726076][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.735829][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.745575][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.755313][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:18 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2185.765074][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2185.774814][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:18 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2185.922247][ T32] audit: type=1400 audit(1583078958.972:74): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=11921 comm="syz-executor.2" 16:09:19 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) recvmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a80)=""/225, 0xe1}], 0x1, &(0x7f0000000780)=""/134, 0x86}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2186.044240][ C0] sd 0:0:1:0: [sg0] tag#741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2186.054904][ C0] sd 0:0:1:0: [sg0] tag#741 CDB: Test Unit Ready [ 2186.061467][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.065681][ C1] sd 0:0:1:0: [sg0] tag#740 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2186.071256][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.081500][ C1] sd 0:0:1:0: [sg0] tag#740 CDB: Test Unit Ready [ 2186.091113][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.097545][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.107113][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.116707][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.126272][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.135860][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.145429][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.155015][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.164710][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.174333][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.183922][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.193526][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.203092][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.212849][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.222434][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.232162][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.241671][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.251307][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.260921][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.270646][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.280258][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.289854][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.299420][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.309004][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.318602][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.328231][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.346410][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.356151][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2186.416714][T12060] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:20 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:20 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2187.164767][ C1] sd 0:0:1:0: [sg0] tag#742 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2187.175416][ C1] sd 0:0:1:0: [sg0] tag#742 CDB: Test Unit Ready [ 2187.182112][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.191934][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.201633][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.211470][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.221250][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.231144][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.240931][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.250725][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.260517][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.270281][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.280069][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.289948][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.299851][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:20 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2187.309636][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.319636][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.329367][ T32] audit: type=1400 audit(1583078960.272:75): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=12305 comm="syz-executor.2" 16:09:20 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2187.568724][ T32] audit: type=1400 audit(1583078960.622:76): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=12436 comm="syz-executor.3" [ 2187.919286][ C1] sd 0:0:1:0: [sg0] tag#745 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2187.929878][ C1] sd 0:0:1:0: [sg0] tag#745 CDB: Test Unit Ready [ 2187.936547][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.946302][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.956055][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.965846][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.975727][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.985709][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2187.995501][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.005273][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.015052][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.016438][ C0] sd 0:0:1:0: [sg0] tag#743 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2188.024859][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.035204][ C0] sd 0:0:1:0: [sg0] tag#743 CDB: Test Unit Ready [ 2188.044815][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.051189][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.060802][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.070388][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.079992][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.089569][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.099160][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.108729][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.118318][ C1] sd 0:0:1:0: [sg0] tag#745 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.127899][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.146112][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.155924][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.165783][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.175578][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.185344][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.195145][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.204899][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.214827][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.225617][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.235433][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.244280][ C0] sd 0:0:1:0: [sg0] tag#744 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2188.254870][ C0] sd 0:0:1:0: [sg0] tag#744 CDB: Test Unit Ready [ 2188.261402][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.271199][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.280975][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.290781][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.300520][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.310304][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.320038][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.329834][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.339615][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.349464][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.359270][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:21 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2188.369117][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.378989][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.388779][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.398560][ C0] sd 0:0:1:0: [sg0] tag#744 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2188.571863][ T32] audit: type=1400 audit(1583078961.622:77): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=12701 comm="syz-executor.5" 16:09:22 executing program 1: io_setup(0xfffeffff, &(0x7f0000000040)=0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x4c640, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x4, 0x6d, 0x2, 0x0, 0x0}, 0x3c) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xfffffff, 0x0, 0x22e, r2, 0x0, &(0x7f0000000080)={0xa2090b, 0xffffff81, [], @ptr=0x80}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x40001, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000004c0)={r7, 0x6}) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r3, &(0x7f0000000100)="4b5f99c2b3a90d5f287eb7d94478eba32887275371c3a425323c5f5c97a7c2cfcf75e5a6ea6f17b0574e82c8f3ddb7bdb49c178ba6ecd68f896975737f19b80f5df504eb829233d1fd454d996eb28499828512778dc0c4a90db32fbb32573115c3170bdc262a180727bf208a1613bdea29f2f1f1dd8cefdfda58abbe859accc1bf027b312adb9e130869a1aaeb941720bc7bb59673d3980261eba82774dde04ff814dc0f625fd9075656bf9aff2f7342221b6d741534422469b00ac5f187837fe1ae7a7a6a146eebe975d662f8b9af29c63782c4c00ed874d3f3de05b5430c670e24f122636bd9b8be2d21d0aa803ddb8eb62a33bcde", 0xf6, 0xfff, 0x0, 0x1}, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0xd811) [ 2189.202522][ C1] sd 0:0:1:0: [sg0] tag#746 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2189.213326][ C1] sd 0:0:1:0: [sg0] tag#746 CDB: Test Unit Ready [ 2189.219951][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.229851][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.239713][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.249581][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.259469][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.269341][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.279295][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.289187][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.299047][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.309043][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.318903][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.328770][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.338626][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.348638][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2189.358584][ C1] sd 0:0:1:0: [sg0] tag#746 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:22 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1c, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) r2 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, 0x0, 0x101, r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}], 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x8, @mcast1, 0x7fff}}, [0x800, 0xffffffffffffffff, 0x10000, 0x100000000, 0x100, 0x3, 0x8, 0x9, 0x10, 0x4, 0x4, 0xfffffffeffffffff, 0x7, 0x6, 0x1]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e20, 0x7, @rand_addr="6730e2e6ace92035f0728fb02b4c021c", 0x1}}}, &(0x7f00000000c0)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4}, 0x0, 0x0, r6, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='vboxnet0+cpuset-\'[&trustedeth0\xc7M\x00', r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$unix(0x1, 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x21b554cf, 0x848000) ioctl$KVM_GET_EMULATED_CPUID(r8, 0xc008ae09, &(0x7f00000004c0)=""/227) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x54) unshare(0x60020000) 16:09:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fcntl$notify(r0, 0x402, 0xffffffff3fffffe8) fcntl$setstatus(r0, 0x4, 0x400) getdents(r0, &(0x7f0000000080)=""/92, 0x5c) [ 2189.691351][T12870] IPVS: ftp: loaded support on port[0] = 21 16:09:22 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2189.891675][ T32] audit: type=1400 audit(1583078962.942:78): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=12875 comm="syz-executor.3" 16:09:23 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvfrom(r3, &(0x7f0000000440)=""/207, 0xcf, 0x40000000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0x7, 0xfffffffffffffff8, 0x5}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2190.195817][T12977] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:23 executing program 4: dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup(r3) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000080)={0x6, 0xa0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2190.453956][ C0] sd 0:0:1:0: [sg0] tag#747 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2190.464523][ C0] sd 0:0:1:0: [sg0] tag#747 CDB: Test Unit Ready [ 2190.471078][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.480930][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.490712][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.500495][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.510296][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.520204][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.529968][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.539802][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.550015][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.559832][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.569697][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.579449][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.589202][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/arp\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000640)=""/132, 0x84}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/83, 0x53}], 0x1, 0x800000) 16:09:23 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2190.598952][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.608705][ C0] sd 0:0:1:0: [sg0] tag#747 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.952106][ C1] sd 0:0:1:0: [sg0] tag#748 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2190.962684][ C1] sd 0:0:1:0: [sg0] tag#748 CDB: Test Unit Ready [ 2190.969239][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.979052][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.988919][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2190.998746][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.008522][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.018291][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.028168][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.037947][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.047707][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.057672][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.067693][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.077526][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.087317][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.097134][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.106905][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:24 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2191.457810][T13582] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:24 executing program 4: accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000008bcad2792dc82b3f800e00010069703665727370616e0000000c00028006000200feff00005acbbad9ad73022759d090707d44ec0508a12b22703de9019205becd879cde6072366c985ea41cf539e045029c7c5d58bcd031867bee6835011ef6bce8f2c8e764a7e63aa96216dc102e2b63a36de8d31924722aefa98a4ddeb2657ba378d3a6aab2e3643f2ec8eb5519b13d329d78d15946aefdda06f8f25f082c61528e50204b7e976b65e05369cca274ab9a5e4913646b2a2302f72b562a4e"], 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240)=0x8, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249265a, 0x0) [ 2191.677292][ C1] sd 0:0:1:0: [sg0] tag#749 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2191.687964][ C1] sd 0:0:1:0: [sg0] tag#749 CDB: Test Unit Ready [ 2191.694639][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.704387][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.714285][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.724276][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.734209][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.744056][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.753917][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.763704][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.773500][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.783384][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.793213][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.802981][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.812793][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:24 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2191.822747][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.832541][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2191.893297][T13602] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 16:09:24 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:25 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2192.096236][ C0] sd 0:0:1:0: [sg0] tag#750 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2192.106818][ C0] sd 0:0:1:0: [sg0] tag#750 CDB: Test Unit Ready [ 2192.113494][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.123239][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.132991][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.142823][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.152574][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.162341][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.172103][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.181854][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.191550][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.201473][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.211308][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.212141][T13737] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2192.221056][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:25 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2192.239893][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.249646][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.260707][ C0] sd 0:0:1:0: [sg0] tag#750 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.347357][ T32] audit: type=1400 audit(1583078965.402:79): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=13721 comm="syz-executor.2" 16:09:25 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2192.458805][ C0] sd 0:0:1:0: [sg0] tag#751 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2192.459936][ C1] sd 0:0:1:0: [sg0] tag#752 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2192.469450][ C0] sd 0:0:1:0: [sg0] tag#751 CDB: Test Unit Ready [ 2192.479999][ C1] sd 0:0:1:0: [sg0] tag#752 CDB: Test Unit Ready [ 2192.486563][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.493068][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.502696][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.512459][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.522064][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.531677][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.541297][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.550944][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.560563][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.570234][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.579855][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.589512][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.599172][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.608801][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.618435][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.628087][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.637707][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.647356][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.656970][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.666680][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.676284][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.685917][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.695588][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.705239][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.714863][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.724499][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.734178][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.743815][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.753440][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.763087][ C1] sd 0:0:1:0: [sg0] tag#752 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2192.869373][ T32] audit: type=1400 audit(1583078965.922:80): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=13907 comm="syz-executor.1" 16:09:26 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2193.188904][ T32] audit: type=1400 audit(1583078966.242:81): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=14038 comm="syz-executor.4" 16:09:26 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:26 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2193.711268][ T32] audit: type=1400 audit(1583078966.762:82): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=14232 comm="syz-executor.5" [ 2193.818044][ T32] audit: type=1400 audit(1583078966.812:83): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=14264 comm="syz-executor.3" [ 2194.235569][ C1] sd 0:0:1:0: [sg0] tag#755 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2194.246175][ C1] sd 0:0:1:0: [sg0] tag#755 CDB: Test Unit Ready [ 2194.252914][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.262718][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.272565][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.282424][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.292265][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.302084][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.311904][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.321589][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.331421][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.341211][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.351045][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.360827][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.370635][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.380405][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.390219][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:27 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2194.837013][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 2194.849224][ C0] clocksource: 'acpi_pm' wd_now: e1f43c wd_last: 48febf mask: ffffff [ 2194.859493][ C0] clocksource: 'tsc' cs_now: 49c78a15f84 cs_last: 49af8bfd599 mask: ffffffffffffffff [ 2194.871065][ C0] tsc: Marking TSC unstable due to clocksource watchdog [ 2194.893115][ C0] sd 0:0:1:0: [sg0] tag#753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=2s [ 2194.903680][ C0] sd 0:0:1:0: [sg0] tag#753 CDB: Test Unit Ready [ 2194.910227][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.919974][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.929726][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:28 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044306, 0x0) r1 = timerfd_create(0x7, 0x800) fcntl$dupfd(r1, 0x406, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x5}}, 0x18) clone(0xa2888503, 0x0, 0x0, 0x0, &(0x7f0000000040)="3291af12eac5728f537047a6873d66b1c065da60c72865f51d77ab6c2440048ffee43c6a9043eca02321ed9fc4966e1e6a278c9f7d7d03c273782f3b378f39b28424edfba169c295c0c32493264fb9f5f4257f962f3a783369939cf3698d6f63ec7fd5d8ae8b3e6b93ceeb96cf65506e04ee380524ca11bde46162ad4c72ffe0530b83d3693ade71eec36bb6ec274231ea0e294bf876c69da9f4") [ 2194.939485][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.949225][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.958948][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.968698][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.978561][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.988329][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2194.998070][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.007811][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.017514][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.027236][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.037160][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.046910][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.055827][ C0] sd 0:0:1:0: [sg0] tag#754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 2195.065310][ C1] sd 0:0:1:0: [sg0] tag#757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2195.066312][ C0] sd 0:0:1:0: [sg0] tag#754 CDB: Test Unit Ready [ 2195.076691][ C1] sd 0:0:1:0: [sg0] tag#757 CDB: Test Unit Ready [ 2195.083171][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.089576][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.099195][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.108975][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.118511][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.128115][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.137673][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.147259][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.156827][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.166464][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.176033][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.185622][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.195183][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.204768][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.214481][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.224077][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.233710][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.243260][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.252864][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.262540][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.272124][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.281644][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.291244][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.300832][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.310415][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.320036][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.329650][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.339254][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.348814][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.358417][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.367047][ C0] sd 0:0:1:0: [sg0] tag#756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 2195.385844][ C0] sd 0:0:1:0: [sg0] tag#756 CDB: Test Unit Ready [ 2195.392513][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.402268][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.412064][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.421896][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.431572][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.441374][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.451154][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.460945][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.470717][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.480506][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.490232][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.500018][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.509749][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.519515][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.529298][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2195.538481][ T5066] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 2195.548208][ T5066] sched_clock: Marking unstable (2195606755206, -68300893)<-(2195551591883, -13137590) [ 2195.585200][T14610] clocksource: Switched to clocksource acpi_pm 16:09:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) [ 2196.088090][ C0] sd 0:0:1:0: [sg0] tag#758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2196.098646][ C0] sd 0:0:1:0: [sg0] tag#758 CDB: Test Unit Ready [ 2196.105317][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.115099][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.124841][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.134647][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.144382][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.154237][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.163973][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.173709][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.183560][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.193296][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.203031][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.212778][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.222523][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.232297][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.242049][ C0] sd 0:0:1:0: [sg0] tag#758 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:29 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x80000000, {{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @loopback}, 0x8}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x3c2, 0x7]}, 0x8) sendfile(r1, r0, &(0x7f0000000140)=0x6, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 16:09:29 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700000000003a79ca82000000", @ANYRES32=0x0, @ANYBLOB="f7ffff0700000000140012000b0001006970766c616e0000fc0002000a0005002100000000000000"], 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000000c0)={0x9, "96712e3de1ce9baef1839027ab36df98b1c90648bcccc219044362cb62b599038dbb55ff0855bc20b9fc89c2b9a5edc8470e0c1c19a3dd43de2361d73c352561244a0c6666a476a13d87629cf80c71ae8091c90d32801b10a812fb95e01f0d604f9a16a0bcddec457bd43d839923f7db01bf0eb509364d93a435b04a19ddac6d28db8e15d5ccbbe7cd12b3827ab3644ec4217a9bb16f48d1298bf797e886ae6871443ba474757dbe5bea2c723391eb4f2ff8c59734635543fc663dec6e4515ffa82e70bb16be272715ef11ababedd948bd5664bcfe26dacc23649271f62a9911607e07a1dc36acfc44a06da61cd8fef8acb65ff9959ec15d6bdf8f015a2c0503"}) 16:09:29 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:29 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2196.832067][ C0] sd 0:0:1:0: [sg0] tag#765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2196.842649][ C0] sd 0:0:1:0: [sg0] tag#765 CDB: Test Unit Ready [ 2196.849198][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.859148][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.869031][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0xe22, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x8cf}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0xfffffa7b, @remote, 0x800}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="984324660b2b28c0e3c439caaee5503fa24e294bed7b400f4a8d2757a2f94d0dcac2c44c51040066d25255c167770ccda449c287f7865948751b841d930ef24ff96467bebd5c24c517be5f0f7a45d26c075f8ed0ebff9cfdf947471665c7c09aa05152f2ffc3ce635cc0d2f8327fe7396a1e2d2f", 0x74}, {&(0x7f0000000180)="6c12892f7e766548894224335bb604c0360b62b7a0e89d64296ccd50e6507a4afcb64a2256e032f65cb2affd19ab26343eb0acb31d6a81ff2cc6e196b75b4828c05651dea995b136f991a1c8bb90d833a61ba63b5180efa9c2518a61ab8d2743edd15c1feb334ed099f400d51405c20aa287ea2405acfc108962fee1115775728c85ebf8ce4c834f4933", 0x8a}, {&(0x7f0000000240)="720c318274924b8d70a6b9754a619d1c79747738055ffd7caa", 0x19}, {&(0x7f0000000280)="d469dde3f35c3b8df1bb239885e0db1ba979b347dc79af37466a041fc7af34d890bd4e06e9c3e80fe178a840739317480c191d63478015cab3df056d1c965f754a4a3eb132c33cd1225b6b9122cc2e6511418eda559cbbdbd40b4064c13fb268557bc63f2a168da97a72d9c99516212575879f08983a9ee32ee76477ae9da69a76ff7186979b9427a92472fee5f608c2179a7d0fcd2da0e8a3fe71d59706336e75980b22aff230af6fbe", 0xaa}, {&(0x7f0000000340)="3a26ab774ffdb3e8020bc5926ad5331717230c179587c8e97a958803d0054d5cee648ec11b16c525b06df77bcfa87b6a69fb37632f2145a4c96c9d25964c77d6ee6086f630cb0d8619290a816c3e01ed693c5736a8cd7dac7bcfa43d0923a5f008b4a7ab39defc79704983d313a4c7ec0472cfa583c7bd210478e831ac8efaf1b3442976f463154a601bc9314d01bc77fb07af8c3080288e7041f88feca9b3526cd601c474962b2d73d2875e49b20e8b6fdaf827d68ee0de55038e2e2acda7dccd0d56b11702bdc5835e02c5ff906cd888661a8adc465d64bdffb5a28df7debc810aadfa", 0xe4}, {&(0x7f0000000440)="8533988e6ff13ad8c5a691a9136a8d7cd29c91fca875f6a3547f3f9e8ca2c78bcf395f42389e3d39882dc468d0ababb3b7a8391727490abdd17b4190da687bd74233774cd22627e580534a173dbe35c1eb5aef1ea42fed12fd6a96c118", 0x5d}], 0x6, &(0x7f0000000540)=[@dontfrag={{0x14}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x2b, 0x19, [], [@generic={0x4, 0xbf, "45b0bdbebff0962c8ee198535aa4f068a0005cf557f3c0a2a8a7814ee3be8312d16ef71951c4fc8ed4ce87941f339491fdd32a7bdb7d40fd78b1e30ed5217ce2905c7ddb726330705111294df99d06a847588d695455c817aa6aa25889886801c44282e237ee668a8372db1e6b5a8e8d49f83349945710a69d13001eec81ae93407b6e3f0300efd17334a73f8dde7a87b294a8fa13751cf755f838b50321c205bbe9db835da4f30ca3eaa244e2188e776507e9dab8e306e7951953e2f2a25c"}, @ra={0x5, 0x2, 0x6269}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8b56}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x2c, 0x11, [], [@generic={0x5, 0x89, "1562b1bacd03ef8b43921c1504851831d80b5a241b9570be7cf981b127241c4eb85e412671d35ef27f51af85f1d6d714a3432369603cd53a786c7106aa5146574e63c4bd4674932c7b8ea1167384babf34f103f0cc38e89f31b7941fa152c9dec7f3a97cf094ee4b8664fd9a7ec8dc9f88a6f9dea6f9746cabe6507c32595d0a6fc2e3499ed1fad1ec"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80}}], 0x1e8}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x8, @mcast1, 0x3ff}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000780)="7c2ab7fe079f5da3b5d0cefd2073179f3e5b4d804b1ebbc98f63e276f34964059be90ecc7eec3479798322371c1ca590d491b685f05c99ac1c10a876005fa9d8467e405ab6c4dd1636cd1800ed0b2ef5f56a7d3a662410bb60aa74470a64cb12ab1ee9b36d3229cc3e36a09f8088ec0812b9580458cf65ae21b0ebcfcf01b497beebb051e0b78809ecd9297b98", 0x8d}], 0x1}}], 0x4, 0x0) [ 2196.878815][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.888598][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.898362][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.908140][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.917905][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.927775][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.937724][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.947467][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.957232][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.966991][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.976752][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2196.986537][ C0] sd 0:0:1:0: [sg0] tag#765 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:30 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2197.177336][ T32] audit: type=1400 audit(1583078970.232:84): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=15001 comm="syz-executor.3" 16:09:30 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2197.428690][ C0] sd 0:0:1:0: [sg0] tag#766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2197.439290][ C0] sd 0:0:1:0: [sg0] tag#766 CDB: Test Unit Ready [ 2197.446033][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.455827][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.465602][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.475374][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.485163][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.494938][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.504690][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.514541][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.524310][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.534077][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.543844][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.553593][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.563342][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:30 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2197.573108][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.582881][ C0] sd 0:0:1:0: [sg0] tag#766 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.647741][ C1] sd 0:0:1:0: [sg0] tag#767 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2197.658334][ C1] sd 0:0:1:0: [sg0] tag#767 CDB: Test Unit Ready [ 2197.665060][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.674873][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.684729][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.694659][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.704538][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.714362][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.724201][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.734029][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.743881][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.753696][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.763509][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.773304][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.783100][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.792950][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2197.802736][ C1] sd 0:0:1:0: [sg0] tag#767 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:30 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) [ 2198.048788][ C0] sd 0:0:1:0: [sg0] tag#704 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2198.059426][ C0] sd 0:0:1:0: [sg0] tag#704 CDB: Test Unit Ready [ 2198.066125][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.075884][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.085653][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.095505][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.105262][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.115033][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.124809][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.134711][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.144481][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.154247][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.164010][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.173898][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.183663][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.193432][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2198.203179][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:31 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x80000000, {{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @loopback}, 0x8}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x3c2, 0x7]}, 0x8) sendfile(r1, r0, &(0x7f0000000140)=0x6, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 16:09:31 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2198.841967][T17007] tipc: TX() has been purged, node left! [ 2198.872045][ T32] audit: type=1400 audit(1583078971.922:85): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=15485 comm="syz-executor.5" 16:09:32 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x80000000, {{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @loopback}, 0x8}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x3c2, 0x7]}, 0x8) sendfile(r1, r0, &(0x7f0000000140)=0x6, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) [ 2199.023000][T17007] tipc: TX() has been purged, node left! [ 2199.235488][T17007] tipc: TX() has been purged, node left! 16:09:32 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:32 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:32 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) [ 2199.412732][T17007] tipc: TX() has been purged, node left! [ 2199.511222][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 2199.511352][ C1] sd 0:0:1:0: [sg0] tag#706 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2199.528820][ C1] sd 0:0:1:0: [sg0] tag#706 CDB: Test Unit Ready [ 2199.535569][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.545510][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.555440][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.565263][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.575174][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.585128][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.595087][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:32 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2199.604936][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.614834][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.624664][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.634579][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.644401][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.654224][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.664014][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.673863][ C1] sd 0:0:1:0: [sg0] tag#706 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.680656][ C0] sd 0:0:1:0: [sg0] tag#707 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2199.693010][ C0] sd 0:0:1:0: [sg0] tag#707 CDB: Test Unit Ready [ 2199.699620][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.709391][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.719377][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.729248][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.739072][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.748850][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.758672][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.768449][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.778306][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.788107][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.797962][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.807734][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.817524][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.827310][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2199.837110][ C0] sd 0:0:1:0: [sg0] tag#707 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.051279][ C1] sd 0:0:1:0: [sg0] tag#708 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2200.061987][ C1] sd 0:0:1:0: [sg0] tag#708 CDB: Test Unit Ready [ 2200.068530][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.078397][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.088212][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.098180][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.107973][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.117770][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.127578][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.137465][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.147421][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.157230][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.167031][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.176846][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.186808][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.196603][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2200.206388][ C1] sd 0:0:1:0: [sg0] tag#708 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:33 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:34 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2201.021341][T16002] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2201.176066][ C0] sd 0:0:1:0: [sg0] tag#709 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2201.186640][ C0] sd 0:0:1:0: [sg0] tag#709 CDB: Test Unit Ready [ 2201.193338][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.203098][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.213031][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.222887][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.232717][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.242528][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.252441][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.262197][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.272233][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.282102][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.291962][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.301631][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.311479][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:34 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) [ 2201.321279][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2201.331104][ C0] sd 0:0:1:0: [sg0] tag#709 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:34 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x44050, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2201.585198][ T32] audit: type=1400 audit(1583078974.642:86): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=16049 comm="syz-executor.2" 16:09:34 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2201.672334][T16095] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2201.925386][ T32] audit: type=1400 audit(1583078974.982:87): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=16112 comm="syz-executor.4" [ 2201.980079][ C0] sd 0:0:1:0: [sg0] tag#710 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2201.990676][ C0] sd 0:0:1:0: [sg0] tag#710 CDB: Test Unit Ready [ 2201.997491][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.007325][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.017168][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.026940][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.036778][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.046626][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.056464][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.066230][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.076065][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.085868][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.095930][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.105730][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.115592][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.125366][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.135185][ C0] sd 0:0:1:0: [sg0] tag#710 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.144136][ C0] sd 0:0:1:0: [sg0] tag#711 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2202.154753][ C0] sd 0:0:1:0: [sg0] tag#711 CDB: Test Unit Ready [ 2202.161286][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.171234][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.181016][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.190781][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.200548][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.210304][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.220086][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.229944][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.239787][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.249601][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.259411][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.269211][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:35 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2202.278985][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.288981][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.298768][ C0] sd 0:0:1:0: [sg0] tag#711 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:35 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2202.583891][ C1] sd 0:0:1:0: [sg0] tag#717 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2202.594505][ C1] sd 0:0:1:0: [sg0] tag#717 CDB: Test Unit Ready [ 2202.601042][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.611003][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.620959][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.630812][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.640641][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.650447][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.660241][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.670043][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.679857][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.689647][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.699460][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.709282][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.719084][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.728866][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.738657][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2202.868438][T16264] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:36 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x80000000, {{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @loopback}, 0x8}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x3c2, 0x7]}, 0x8) sendfile(r1, r0, &(0x7f0000000140)=0x6, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 16:09:36 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2203.230983][ C0] sd 0:0:1:0: [sg0] tag#718 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2203.241623][ C0] sd 0:0:1:0: [sg0] tag#718 CDB: Test Unit Ready [ 2203.248311][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.259298][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.269175][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.279024][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.288888][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.298667][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.308433][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.318219][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.328010][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.337776][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.347607][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.357391][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.367166][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:36 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2203.376957][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.386715][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2203.584239][T16494] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:37 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:37 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:37 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2204.640918][T16545] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2204.670340][ C1] sd 0:0:1:0: [sg0] tag#719 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2204.680949][ C1] sd 0:0:1:0: [sg0] tag#719 CDB: Test Unit Ready 16:09:37 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2204.687661][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.697474][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.707294][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.717145][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.726986][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.736774][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.746622][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.756407][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.766251][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.776023][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.785877][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.795704][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.805501][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.815281][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.825093][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2204.868830][ T32] audit: type=1400 audit(1583078977.922:88): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=16546 comm="syz-executor.5" 16:09:38 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2205.012412][ C0] sd 0:0:1:0: [sg0] tag#720 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2205.023046][ C0] sd 0:0:1:0: [sg0] tag#720 CDB: Test Unit Ready [ 2205.029582][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.039391][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.049165][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.059082][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.068825][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.078635][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.088415][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.098195][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.107972][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.117831][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.127633][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.137428][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.147260][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:38 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2205.157039][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.166846][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.399012][ C1] sd 0:0:1:0: [sg0] tag#721 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2205.409604][ C1] sd 0:0:1:0: [sg0] tag#721 CDB: Test Unit Ready [ 2205.416317][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.426201][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.435992][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.445782][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.455555][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.465334][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.475112][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.484902][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.494700][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.504494][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.514287][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.524052][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.533849][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.543657][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.553448][ C1] sd 0:0:1:0: [sg0] tag#721 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2205.587551][ T32] audit: type=1400 audit(1583078978.642:89): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=16638 comm="syz-executor.5" [ 2205.651504][ T32] audit: type=1400 audit(1583078978.702:90): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=16757 comm="syz-executor.3" 16:09:39 executing program 4: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x80000000, {{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @loopback}, 0x8}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x3c2, 0x7]}, 0x8) sendfile(r1, r0, &(0x7f0000000140)=0x6, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 16:09:39 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:39 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2206.062596][ C1] sd 0:0:1:0: [sg0] tag#722 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2206.073185][ C1] sd 0:0:1:0: [sg0] tag#722 CDB: Test Unit Ready [ 2206.079727][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.089611][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.099494][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.109293][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.119075][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.128951][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.138728][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.148615][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.158579][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.168383][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.178176][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.188062][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.197863][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.207640][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.217430][ C1] sd 0:0:1:0: [sg0] tag#722 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.245013][T16764] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:39 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:39 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:39 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2206.576560][ C1] sd 0:0:1:0: [sg0] tag#723 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2206.587150][ C1] sd 0:0:1:0: [sg0] tag#723 CDB: Test Unit Ready [ 2206.593857][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.603659][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.613509][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.623329][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.633221][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.643110][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.653078][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.662898][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.672786][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.682586][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.692383][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.702187][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.712048][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.721735][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.731550][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2206.976996][ T32] audit: type=1400 audit(1583078979.892:91): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=16908 comm="syz-executor.1" [ 2207.135171][T17066] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2207.244132][ C1] sd 0:0:1:0: [sg0] tag#724 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2207.254746][ C1] sd 0:0:1:0: [sg0] tag#724 CDB: Test Unit Ready [ 2207.261294][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.271180][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.281038][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.290957][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.300862][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.311263][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.321078][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.330956][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.340878][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.350856][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.360794][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.370798][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.380600][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.390442][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.400240][ C1] sd 0:0:1:0: [sg0] tag#724 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:40 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2207.683505][ T32] audit: type=1400 audit(1583078980.742:92): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=17180 comm="syz-executor.2" [ 2207.716358][ C1] sd 0:0:1:0: [sg0] tag#725 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2207.726982][ C1] sd 0:0:1:0: [sg0] tag#725 CDB: Test Unit Ready [ 2207.733702][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.743496][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.753285][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.763131][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.772976][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.782958][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.792746][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.802671][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.812475][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.822312][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:40 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2207.832113][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.841976][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.851651][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.861535][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2207.871366][ C1] sd 0:0:1:0: [sg0] tag#725 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:41 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2208.025771][T17183] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2208.211728][ C1] sd 0:0:1:0: [sg0] tag#726 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2208.222543][ C1] sd 0:0:1:0: [sg0] tag#726 CDB: Test Unit Ready [ 2208.229083][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.238961][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.248766][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.258635][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.268551][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.278353][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.288262][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.298070][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:41 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2208.308759][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.318561][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.328402][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.338252][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.348143][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.358022][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.367815][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2208.471206][ C0] not chained 670000 origins [ 2208.471757][ C0] CPU: 0 PID: 16488 Comm: kworker/u4:12 Not tainted 5.6.0-rc2-syzkaller #0 [ 2208.471757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2208.492256][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 2208.492256][ C0] Call Trace: [ 2208.492256][ C0] [ 2208.492256][ C0] dump_stack+0x1c9/0x220 [ 2208.492256][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 2208.492256][ C0] ? tcp_fin+0x1f9/0x890 [ 2208.492256][ C0] ? tcp_data_queue+0x24ce/0x9c40 [ 2208.492256][ C0] ? tcp_rcv_state_process+0x67db/0x7140 [ 2208.492256][ C0] ? tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.492256][ C0] ? tcp_v4_rcv+0x4398/0x4d00 [ 2208.492256][ C0] ? ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.492256][ C0] ? ip_local_deliver+0x62a/0x7c0 [ 2208.492256][ C0] ? ip_rcv+0x6cf/0x750 [ 2208.492256][ C0] ? process_backlog+0xf0b/0x1410 [ 2208.492256][ C0] ? net_rx_action+0x786/0x1aa0 [ 2208.492256][ C0] ? __do_softirq+0x311/0x83d [ 2208.492256][ C0] ? do_softirq_own_stack+0x49/0x80 [ 2208.492256][ C0] ? kmsan_internal_chain_origin+0x30/0x130 [ 2208.492256][ C0] ? ip_finish_output2+0x2115/0x2610 [ 2208.582252][ C0] ? __ip_finish_output+0xaa7/0xd80 [ 2208.582252][ C0] ? ip_finish_output+0x166/0x410 [ 2208.582252][ C0] ? ip_output+0x593/0x680 [ 2208.582252][ C0] ? __ip_queue_xmit+0x1b5c/0x21a0 [ 2208.582252][ C0] ? ip_queue_xmit+0xcc/0xf0 [ 2208.582252][ C0] ? __tcp_transmit_skb+0x439c/0x6090 [ 2208.582252][ C0] ? tcp_write_xmit+0x30e1/0xb470 [ 2208.582252][ C0] ? __tcp_push_pending_frames+0x124/0x4e0 [ 2208.582252][ C0] ? tcp_send_fin+0x131e/0x1570 [ 2208.582252][ C0] ? tcp_shutdown+0x188/0x200 [ 2208.582252][ C0] ? inet_shutdown+0x342/0x5e0 [ 2208.582252][ C0] ? kernel_sock_shutdown+0x9d/0xc0 [ 2208.582252][ C0] ? rds_tcp_accept_one+0xe17/0x1060 [ 2208.582252][ C0] ? rds_tcp_accept_worker+0x61/0x160 [ 2208.582252][ C0] ? process_one_work+0x1555/0x1f40 [ 2208.582252][ C0] ? worker_thread+0xef6/0x2450 [ 2208.582252][ C0] ? kthread+0x4b5/0x4f0 [ 2208.582252][ C0] ? ret_from_fork+0x35/0x40 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2208.582252][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2208.582252][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 2208.582252][ C0] ? __msan_get_context_state+0x9/0x20 [ 2208.582252][ C0] ? __module_get+0x19/0x230 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 2208.582252][ C0] tcp_time_wait+0xaca/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2208.582252][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ? tcp_filter+0xf0/0xf0 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 2208.582252][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] ? ip_rcv_core+0x1270/0x1270 [ 2208.582252][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 2208.582252][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] ? net_tx_action+0xc30/0xc30 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] do_softirq_own_stack+0x49/0x80 [ 2208.582252][ C0] [ 2208.582252][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 2208.582252][ C0] local_bh_enable+0x36/0x40 [ 2208.582252][ C0] ip_finish_output2+0x2115/0x2610 [ 2208.582252][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 2208.582252][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 2208.582252][ C0] __ip_finish_output+0xaa7/0xd80 [ 2208.582252][ C0] ip_finish_output+0x166/0x410 [ 2208.582252][ C0] ip_output+0x593/0x680 [ 2208.582252][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 2208.582252][ C0] ? ip_finish_output+0x410/0x410 [ 2208.582252][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 2208.582252][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] ip_queue_xmit+0xcc/0xf0 [ 2208.582252][ C0] ? tcp_v6_send_response+0x2920/0x2920 [ 2208.582252][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 2208.582252][ C0] tcp_write_xmit+0x30e1/0xb470 [ 2208.582252][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 2208.582252][ C0] tcp_send_fin+0x131e/0x1570 [ 2208.582252][ C0] tcp_shutdown+0x188/0x200 [ 2208.582252][ C0] ? tcp_set_state+0x9d0/0x9d0 [ 2208.582252][ C0] inet_shutdown+0x342/0x5e0 [ 2208.582252][ C0] ? inet_recvmsg+0x7d0/0x7d0 [ 2208.582252][ C0] kernel_sock_shutdown+0x9d/0xc0 [ 2208.582252][ C0] rds_tcp_accept_one+0xe17/0x1060 [ 2208.582252][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2208.582252][ C0] rds_tcp_accept_worker+0x61/0x160 [ 2208.582252][ C0] ? rds_tcp_exit_net+0xcb0/0xcb0 [ 2208.582252][ C0] process_one_work+0x1555/0x1f40 [ 2208.582252][ C0] worker_thread+0xef6/0x2450 [ 2208.582252][ C0] kthread+0x4b5/0x4f0 [ 2208.582252][ C0] ? process_one_work+0x1f40/0x1f40 [ 2208.582252][ C0] ? kthread_blkcg+0xf0/0xf0 [ 2208.582252][ C0] ret_from_fork+0x35/0x40 [ 2208.582252][ C0] Uninit was stored to memory at: [ 2208.582252][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] inet_twsk_alloc+0xab6/0xba0 [ 2208.582252][ C0] tcp_time_wait+0xcd/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] [ 2208.582252][ C0] Uninit was stored to memory at: [ 2208.582252][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 2208.582252][ C0] tcp_time_wait+0xaca/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] [ 2208.582252][ C0] Uninit was stored to memory at: [ 2208.582252][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] tcp_time_wait+0xb7e/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] [ 2208.582252][ C0] Uninit was stored to memory at: [ 2208.582252][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] inet_twsk_alloc+0xab6/0xba0 [ 2208.582252][ C0] tcp_time_wait+0xcd/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] [ 2208.582252][ C0] Uninit was stored to memory at: [ 2208.582252][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] __inet_twsk_schedule+0x24e/0x2c0 [ 2208.582252][ C0] tcp_time_wait+0xaca/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] [ 2208.582252][ C0] Uninit was stored to memory at: [ 2208.582252][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] tcp_time_wait+0xb7e/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] [ 2208.582252][ C0] Uninit was stored to memory at: [ 2208.582252][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2208.582252][ C0] __msan_chain_origin+0x50/0x90 [ 2208.582252][ C0] inet_twsk_alloc+0xab6/0xba0 [ 2208.582252][ C0] tcp_time_wait+0xcd/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2208.582252][ C0] [ 2208.582252][ C0] Uninit was created at: [ 2208.582252][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 2208.582252][ C0] kmsan_alloc_page+0x12a/0x310 [ 2208.582252][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 2208.582252][ C0] alloc_pages_current+0x67d/0x990 [ 2208.582252][ C0] alloc_slab_page+0x111/0x12f0 [ 2208.582252][ C0] new_slab+0x2bc/0x1130 [ 2208.582252][ C0] ___slab_alloc+0x1533/0x1f30 [ 2208.582252][ C0] kmem_cache_alloc+0xb23/0xd70 [ 2208.582252][ C0] inet_twsk_alloc+0x135/0xba0 [ 2208.582252][ C0] tcp_time_wait+0xcd/0x10b0 [ 2208.582252][ C0] tcp_fin+0x1f9/0x890 [ 2208.582252][ C0] tcp_data_queue+0x24ce/0x9c40 [ 2208.582252][ C0] tcp_rcv_state_process+0x67db/0x7140 [ 2208.582252][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2208.582252][ C0] tcp_v4_rcv+0x4398/0x4d00 [ 2208.582252][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2208.582252][ C0] ip_local_deliver+0x62a/0x7c0 [ 2208.582252][ C0] ip_rcv+0x6cf/0x750 [ 2208.582252][ C0] process_backlog+0xf0b/0x1410 [ 2208.582252][ C0] net_rx_action+0x786/0x1aa0 [ 2208.582252][ C0] __do_softirq+0x311/0x83d [ 2209.699491][T17358] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:43 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x80, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf93010e, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f00007f000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c867a4302c54c6c25fd15e9a32da57a1c685f46198468c7086d241d57982df44c925b4a40ab362ead708d2cdd530d90e5ba0645b6c18a361eec336df0db74ab5e0af75ab8e67d84572237c65c9344c90efaaa8d0020c91bd320016566d317197bf1c400c97e2fecef5f675b0ea1659e41f291fa1e9f9e29e46b194100889adaab4acf5809a57d8b5238a9b87622b7b5cd7669ccb90ec9cc36d1b568ae0b742c43b8312f564d7423f095b499ec464094dcb359a6b9356c53dddedeb5d7560d0646a0d0801a269b59e661724ad6", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 16:09:43 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:43 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2210.377233][ T32] audit: type=1400 audit(1583078983.432:93): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=17398 comm="syz-executor.3" 16:09:43 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:43 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2210.907833][ T32] audit: type=1400 audit(1583078983.962:94): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=17404 comm="syz-executor.1" [ 2210.946925][ C1] sd 0:0:1:0: [sg0] tag#727 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2210.957528][ C1] sd 0:0:1:0: [sg0] tag#727 CDB: Test Unit Ready [ 2210.964337][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2210.974133][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2210.983914][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2210.993795][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.003660][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.013455][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.023332][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.033144][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.042986][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.052806][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.062673][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.072456][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.082289][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.092087][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.101942][ C1] sd 0:0:1:0: [sg0] tag#727 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.182858][T17401] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:44 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x81, 0x8}}) mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0x6) 16:09:44 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:44 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2211.942290][ C0] sd 0:0:1:0: [sg0] tag#728 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2211.952860][ C0] sd 0:0:1:0: [sg0] tag#728 CDB: Test Unit Ready [ 2211.959407][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.969240][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.979188][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.989081][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2211.998856][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.008670][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.019337][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.029206][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.039033][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.048871][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.058771][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.068578][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.078439][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.088275][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.098098][ C0] sd 0:0:1:0: [sg0] tag#728 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:45 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2212.333199][T17965] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:45 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 2212.675795][ C0] sd 0:0:1:0: [sg0] tag#729 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2212.686479][ C0] sd 0:0:1:0: [sg0] tag#729 CDB: Test Unit Ready [ 2212.693172][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.703112][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.712893][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.722829][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.732588][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.742394][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.752279][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.762034][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.772027][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.781725][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.791519][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.801452][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.811236][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.821112][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2212.830884][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:46 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000100)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002f00000300000000c00195c1", 0x34}], 0x1}, 0x0) 16:09:46 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000100)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002f00000300000000c00195c1", 0x34}], 0x1}, 0x0) 16:09:46 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2213.835594][ C1] sd 0:0:1:0: [sg0] tag#737 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2213.846182][ C1] sd 0:0:1:0: [sg0] tag#737 CDB: Test Unit Ready [ 2213.852902][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.862681][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.872461][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.882306][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.892291][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.902103][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.911941][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.921973][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.931881][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.941656][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.951497][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.961319][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.971137][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:47 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000f0000000c0001007463696e6465780010000200040007000800040000000000205c539531be69cad5a030327ae30f95e3a84f1a661a7ab0b270818958e5eb34f14a2805a4167bfd7b2572fa9a4293751ab158e908970aa39428d0ce7e6810e05429995f3b91a40c6dcde7664f17aadeda5b84cd6b0e9e83972c1aa8ff13f17ded77308d0e82ff75f05e89d5b6d37f0da4e2c2c9b8bfb65825b885e090b4817b218930df99bf8d7eed368b8b6e31295fe2601c55f28240315165197f9ba5398a5c261f1ac945923ee600000000000000"], 0x40}}, 0x0) [ 2213.980965][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2213.990886][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000005c00)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}}, {{&(0x7f00000040c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x2, 0x0) 16:09:47 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:47 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2214.165430][T18154] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2214.226411][ C1] sd 0:0:1:0: [sg0] tag#738 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2214.237127][ C1] sd 0:0:1:0: [sg0] tag#738 CDB: Test Unit Ready [ 2214.243951][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.253784][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.263601][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.273468][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.283306][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.293103][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.303101][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.312908][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.322711][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.332641][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.342458][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.352268][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.362106][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.371948][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.381615][ C1] sd 0:0:1:0: [sg0] tag#738 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2214.406179][ T32] audit: type=1400 audit(1583078987.462:95): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=18249 comm="syz-executor.5" 16:09:47 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x4c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x21, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) 16:09:47 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:47 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2215.059710][T18620] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:48 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3d8, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff8e0000000000a470190f0000001800001314000300"/42], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fd}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = accept4$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x800) recvfrom(r4, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x1, 0x1, 0x4, 0x8, 0x9, "cb02aa6eb04f9ba1ed0c6437be1303be4dd31b491e2bb08ba6144fe4518da2910db1aad2fa37106f79e7d16a3ad411fd3e731007d2b86239f08be71233fa73", 0x35}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249265a, 0x0) 16:09:48 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2215.606213][T18795] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:48 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:49 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:49 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:49 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r0, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2216.095240][T18908] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2216.130946][ T32] audit: type=1400 audit(1583078989.182:96): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=18907 comm="syz-executor.3" [ 2216.138138][ C1] sd 0:0:1:0: [sg0] tag#739 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2216.160407][ C1] sd 0:0:1:0: [sg0] tag#739 CDB: Test Unit Ready [ 2216.167088][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.176910][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.186797][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.196606][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.206444][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.216250][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.226047][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.235983][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.245866][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.255683][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.265500][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.275303][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.285077][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:49 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x10000, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) [ 2216.295049][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.304859][ C1] sd 0:0:1:0: [sg0] tag#739 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2216.346072][ T32] audit: type=1400 audit(1583078989.402:97): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=18910 comm="syz-executor.2" [ 2216.547254][T18917] x86/PAT: syz-executor.1:18917 map pfn RAM range req write-combining for [mem 0x0eab0000-0x0eab1fff], got write-back 16:09:49 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:49 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:49 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'os2.', 'vboxnet1\x00'}, &(0x7f0000000040)=""/175, 0xaf) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd07, 0x29, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2217.009329][T19114] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2217.116835][ C1] sd 0:0:1:0: [sg0] tag#740 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2217.127442][ C1] sd 0:0:1:0: [sg0] tag#740 CDB: Test Unit Ready [ 2217.134209][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.144038][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.153887][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.163918][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.173881][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.183701][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.193708][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.203781][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.213636][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.223505][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.233368][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.243249][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.253154][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:50 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:50 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2217.263050][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.273060][ C1] sd 0:0:1:0: [sg0] tag#740 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2217.462139][T19302] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:50 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:51 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r0, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2218.774834][ T32] audit: type=1400 audit(1583078991.832:98): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=19480 comm="syz-executor.3" 16:09:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xff, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000000}, 0x24000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = getpid() kcmp(0x0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="12361a70f9bf70cfaeaf3a5dc0218ec3779292b047c3cb9c49c4ded082076dd04fbbf04514ea61720084430d53067135ee1c3c3c950102d86a254b696baa08493a95a8d0096c546802c2953eb13bbb327bb25c3c0acd468264778082302221bf4f3718ea4e356567f1effb37c2be36548e92dbfeaa26c66be3bcffb8d3e285fb8448750cc3a0ad2c6782bf29aa13e470f41c18a291c55b31a4a2319d65f2e94b6227c4114fca33206f6ec92abb3ebe0a088853a5862b38c1fc25ba59cce9e9ade77000766143bdda", 0xc8, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r2, 0x0, 0x94}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha384-generic\x00'}}, &(0x7f0000000300), &(0x7f0000001300)=""/148) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2, r1}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffbf51bf}, 0xc) keyctl$read(0xb, 0x0, 0x0, 0x0) unshare(0x60040000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000300)={0x3, {0x5, 0xfff, 0xfffffff8, 0x2}, {0x0, 0x2b, 0x1c0, 0x200}, {0x10001, 0x10001}}) 16:09:52 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:52 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:52 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:52 executing program 0: openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2219.106321][ C1] sd 0:0:1:0: [sg0] tag#741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2219.117256][ C1] sd 0:0:1:0: [sg0] tag#741 CDB: Test Unit Ready [ 2219.124453][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.134643][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.145187][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.155418][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.165716][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.175764][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.185782][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.196096][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.206513][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.216488][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.226661][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.236662][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.237324][T19529] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2219.246955][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.266575][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.276862][ C1] sd 0:0:1:0: [sg0] tag#741 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2219.392049][T19530] IPVS: ftp: loaded support on port[0] = 21 16:09:52 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:52 executing program 0: openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:53 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:53 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2220.508560][ C1] sd 0:0:1:0: [sg0] tag#742 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2220.519333][ C1] sd 0:0:1:0: [sg0] tag#742 CDB: Test Unit Ready [ 2220.526435][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.536503][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.546591][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.556642][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.566800][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.576889][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.577294][T19806] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2220.587223][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.606655][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.616765][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.626998][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.637053][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.647075][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:53 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2220.657180][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.667287][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2220.677431][ C1] sd 0:0:1:0: [sg0] tag#742 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:53 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2220.988801][ C0] sd 0:0:1:0: [sg0] tag#743 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2221.000041][ C0] sd 0:0:1:0: [sg0] tag#743 CDB: Test Unit Ready [ 2221.006947][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.017235][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.027354][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.037902][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.047885][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.057904][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.067961][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.078114][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.088322][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.098308][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.108550][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.118615][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.129419][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.139559][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2221.149804][ C0] sd 0:0:1:0: [sg0] tag#743 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:54 executing program 0: openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2221.413702][T20139] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:54 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r0, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:54 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x3, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001b80)=[{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}], 0x1, 0x0) sched_setparam(r3, &(0x7f0000000000)=0x1) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x10005, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}}, 0x4008800) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x4e, 0x0, "8c307a3ef3af518175549a193c56ed5c74aaf6be118bdfef63ca639e9a07bafbf830cf2ad2c40ca28ff899a305dc711e6833fe546c14e4a6680806e2fa1ce5feaec2e4b04cb822a13223eddef0e64d42"}, 0xd8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) 16:09:54 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2221.748605][T20146] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2221.857153][ T32] audit: type=1400 audit(1583078994.911:99): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=20145 comm="syz-executor.3" [ 2221.882212][T16488] tipc: TX() has been purged, node left! 16:09:55 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:55 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:55 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:55 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2222.355158][T20264] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2222.459412][ C1] sd 0:0:1:0: [sg0] tag#744 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2222.470461][ C1] sd 0:0:1:0: [sg0] tag#744 CDB: Test Unit Ready [ 2222.477427][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.487453][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.497532][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:55 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd90, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x4c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2222.508104][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.518216][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.528355][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.538506][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.548840][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.559327][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.569637][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.579951][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.590016][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.600738][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.610780][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.620922][ C1] sd 0:0:1:0: [sg0] tag#744 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.662394][ C0] sd 0:0:1:0: [sg0] tag#745 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2222.673214][ C0] sd 0:0:1:0: [sg0] tag#745 CDB: Test Unit Ready [ 2222.680160][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.690408][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.700515][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.710522][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.720676][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.730611][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.740840][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.751236][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.761933][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.772158][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.783215][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.793846][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.804175][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.814266][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.824179][ C0] sd 0:0:1:0: [sg0] tag#745 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2222.895250][T20480] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2222.903621][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2222.953748][T20480] device bond1 entered promiscuous mode 16:09:56 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000006c0)={'bond0\x00', @ifru_names='caif0\x00'}) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) 16:09:56 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2223.423411][T20775] bond0: (slave caif0): ether type (0) is different from other slaves (1), can not enslave it [ 2223.497250][T20775] bond0: (slave caif0): ether type (0) is different from other slaves (1), can not enslave it [ 2223.672919][T20785] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:09:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:57 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:09:57 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:57 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:09:57 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x8, 0x6, 0xff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r7}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r7, 0x5}, 0x8) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={r10}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r10, 0x5}, 0x8) fremovexattr(r3, &(0x7f0000000280)=@known='system.advise\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000200)={r10, 0x6, 0x8, 0x2, 0x8, 0x1000}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={r7, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000140)={r11, 0x5, 0x98, "380bd90f83902048b4007b75e5c9820fdb2a19b8b87060c228464bfe8729c6c9c4319bde3f2685ada4a19951cf2559d2b0c2c65d68d75c299205d08ab2482ef15cface2dd4df2a0d4b9cd3140749dcd769cacfac8086d20133f393755effad9c1d8f12c3042d4f5222a062d3632df38840792693a3aedd03e4a7df4b5e1891ffb76af7335687d3239ecc2dc9329490c4a84f6f8d994078e3"}, 0xa0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x4d}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_dccp(0x2, 0x6, 0x0) [ 2224.721249][ C0] sd 0:0:1:0: [sg0] tag#748 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2224.732348][ C0] sd 0:0:1:0: [sg0] tag#748 CDB: Test Unit Ready [ 2224.738950][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.749300][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.759225][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.769561][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.779593][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.789612][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.799618][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.809389][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.819414][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.819901][T20895] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2224.829165][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.829269][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.829371][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.867804][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.877874][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.888179][ C0] sd 0:0:1:0: [sg0] tag#748 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.949531][ T32] audit: type=1400 audit(1583078998.001:100): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=20892 comm="syz-executor.3" 16:09:58 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2225.487068][ C0] sd 0:0:1:0: [sg0] tag#749 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2225.498247][ C0] sd 0:0:1:0: [sg0] tag#749 CDB: Test Unit Ready [ 2225.505089][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.515380][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.525280][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.535173][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.545364][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.555388][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.565280][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.575364][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.585751][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.596184][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.606255][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.616466][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.626773][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:58 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2225.637174][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.647299][ C0] sd 0:0:1:0: [sg0] tag#749 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.814939][ C1] sd 0:0:1:0: [sg0] tag#750 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2225.825986][ C1] sd 0:0:1:0: [sg0] tag#750 CDB: Test Unit Ready [ 2225.832760][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.842900][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.852973][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.863320][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.873131][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.883104][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.893143][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.903058][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.913170][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.923113][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.933003][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.942932][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.952859][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:59 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:59 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(0xffffffffffffffff, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2225.962986][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.973293][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.140019][ T32] audit: type=1400 audit(1583078999.191:101): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=21454 comm="syz-executor.2" 16:09:59 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2226.273208][ C0] sd 0:0:1:0: [sg0] tag#751 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2226.283940][ C0] sd 0:0:1:0: [sg0] tag#751 CDB: Test Unit Ready [ 2226.290510][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.300577][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.310487][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.320413][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.330163][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.339938][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.349835][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.359762][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.369596][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.379455][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.389421][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.399245][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.409063][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.419019][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.429014][ C0] sd 0:0:1:0: [sg0] tag#751 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.438029][ C0] sd 0:0:1:0: [sg0] tag#752 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2226.448623][ C0] sd 0:0:1:0: [sg0] tag#752 CDB: Test Unit Ready [ 2226.455276][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.465292][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.475191][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.485145][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.495097][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.505174][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.515205][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.525007][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.535001][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.544789][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.554941][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.564945][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:09:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:09:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0xf, 0x80, 0x1, 0x1}, 0x2c) dup(r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000300)}, 0x20) 16:09:59 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 2226.574899][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.584680][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.594741][ C0] sd 0:0:1:0: [sg0] tag#752 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:09:59 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2226.788754][ C0] sd 0:0:1:0: [sg0] tag#753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2226.799331][ C0] sd 0:0:1:0: [sg0] tag#753 CDB: Test Unit Ready [ 2226.806023][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.815798][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.825724][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.835760][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.845534][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.855426][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.865386][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.875745][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.876416][T21546] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2226.885958][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.886063][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.915236][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.925269][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.935450][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.945415][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2226.955272][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@remote, @remote, @remote}, 0xc) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1=0xe0000002}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 16:10:00 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:00 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 2227.700683][ C0] sd 0:0:1:0: [sg0] tag#754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2227.712252][ C0] sd 0:0:1:0: [sg0] tag#754 CDB: Test Unit Ready [ 2227.718938][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.729375][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.739305][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.749392][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.759723][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.770003][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.779953][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.790693][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.800679][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.811052][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.820949][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.830951][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.841096][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.851346][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.861376][ C0] sd 0:0:1:0: [sg0] tag#754 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2227.893372][ T32] audit: type=1400 audit(1583079000.951:102): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=21984 comm="syz-executor.3" [ 2227.989592][T22008] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 16:10:01 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0xb, 0x4, 0x200000, 0xf88, {0x0, 0x2710}, {0x5, 0x0, 0x20, 0x45, 0x7, 0x3, "4326d83f"}, 0x3, 0x2, @offset=0xfff, 0x4, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000080)={0x1, 0xf3}, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r3, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0044306, 0x0) mmap(&(0x7f0000708000/0x2000)=nil, 0x2000, 0x1, 0x1010, r4, 0x85c6b000) r5 = socket$inet6(0xa, 0xeafd5c22f3f9d031, 0x6) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "426f60b455845466", "83de440296fb7d253200236ca310a1d6", "66b52181", "517d184214efdaca"}, 0x28) r6 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) 16:10:02 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:02 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:02 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000980)='keyring\x00', 0x0, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r4, 0xfffffffffffffff9, r3, 0x0) r5 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='\x00', r4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r6 = add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="22c7a7fc1dc3991bb9be8918e225798d37fa1a4c5a4dd7d0b4dd930e42aa87dbb967933905e2852b984ab0157b943c742da24f3a2209ad4f5b70578f", 0x3c, r0) keyctl$search(0xa, r5, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r6) r7 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x309, r1) keyctl$read(0xb, r7, &(0x7f0000005340)=""/4096, 0xd900) add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0xfffffe21, r7) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val, {@ipv6}}, 0x0) 16:10:02 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 16:10:02 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(0xffffffffffffffff, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2229.648759][ C1] sd 0:0:1:0: [sg0] tag#761 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2229.649040][ C0] sd 0:0:1:0: [sg0] tag#762 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2229.659356][ C1] sd 0:0:1:0: [sg0] tag#761 CDB: Test Unit Ready [ 2229.669884][ C0] sd 0:0:1:0: [sg0] tag#762 CDB: Test Unit Ready [ 2229.670011][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.676568][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.683142][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.692985][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.702712][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.712389][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.722110][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.731896][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.741408][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.751067][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.760761][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.770491][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.780147][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.789844][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.799614][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.809279][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.818984][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.828641][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.838416][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.848099][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.857786][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.867457][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.877127][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.886811][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.896490][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.906419][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.916083][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.925744][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.935409][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2229.945281][ C1] sd 0:0:1:0: [sg0] tag#761 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.114498][ T32] audit: type=1400 audit(1583079003.131:103): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=22282 comm="syz-executor.2" 16:10:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2230.410654][ T32] audit: type=1400 audit(1583079003.461:104): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=22594 comm="syz-executor.3" 16:10:03 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:03 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:03 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2230.826925][ C1] sd 0:0:1:0: [sg0] tag#763 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2230.837608][ C1] sd 0:0:1:0: [sg0] tag#763 CDB: Test Unit Ready [ 2230.844446][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.854359][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.864359][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.874283][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.884206][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.894220][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.904128][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.914127][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.924081][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.933976][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.943913][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.953897][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.963992][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.973949][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.983884][ C1] sd 0:0:1:0: [sg0] tag#763 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2230.992944][ C1] sd 0:0:1:0: [sg0] tag#764 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2231.003785][ C1] sd 0:0:1:0: [sg0] tag#764 CDB: Test Unit Ready [ 2231.010640][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.020595][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.030634][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.040721][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.051011][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.060962][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.071031][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.081078][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.091455][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.101514][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.111523][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:04 executing program 3: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2231.121648][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.131591][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.141939][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.152053][ C1] sd 0:0:1:0: [sg0] tag#764 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.246770][ T32] audit: type=1400 audit(1583079004.301:105): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=22910 comm="syz-executor.3" [ 2231.260820][ C1] sd 0:0:1:0: [sg0] tag#765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2231.276698][ C1] sd 0:0:1:0: [sg0] tag#765 CDB: Test Unit Ready [ 2231.283399][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.293574][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.303649][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.313568][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.323678][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.333485][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.343903][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.353914][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.363939][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.373856][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.384371][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.394336][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.404499][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.414682][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2231.424599][ C1] sd 0:0:1:0: [sg0] tag#765 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:04 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:05 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:05 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(0xffffffffffffffff, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r1, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x6, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[]}}, 0x0) 16:10:05 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 16:10:05 executing program 3: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:05 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2232.413447][ C1] sd 0:0:1:0: [sg0] tag#766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2232.424466][ C1] sd 0:0:1:0: [sg0] tag#766 CDB: Test Unit Ready [ 2232.427631][ C0] sd 0:0:1:0: [sg0] tag#767 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2232.431029][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.441515][ C0] sd 0:0:1:0: [sg0] tag#767 CDB: Test Unit Ready [ 2232.451392][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.458043][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.467981][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.478060][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.487726][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.497368][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.507221][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.516854][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.516971][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.526615][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.536370][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.546097][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.555951][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.565708][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.575406][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.585087][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.594722][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.604532][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.614161][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.623802][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.633594][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.643232][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.652864][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.662618][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.672245][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.682099][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.691625][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.701304][ C1] sd 0:0:1:0: [sg0] tag#766 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.711017][ C0] sd 0:0:1:0: [sg0] tag#767 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2232.844195][ T32] audit: type=1400 audit(1583079005.901:106): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=23060 comm="syz-executor.2" 16:10:06 executing program 3: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:06 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 2233.283517][ T32] audit: type=1400 audit(1583079006.341:107): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=23445 comm="syz-executor.3" 16:10:06 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="390000001300091268fe000081000000e800ff3f03000000450001070000001419001a00040002000700020002000004a9ff4ba8249905d62a", 0x39}], 0x1) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x10005, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x10005, 0x0) getpeername$packet(r10, &(0x7f0000002980)={0x11, 0x0, 0x0}, &(0x7f00000029c0)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) splice(r13, 0x0, r14, 0x0, 0x10005, 0x0) getsockopt$inet_mreqn(r14, 0x0, 0x23, &(0x7f0000002d80)={@dev, @dev, 0x0}, &(0x7f0000002dc0)=0xc) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket(0x11, 0x2, 0x0) bind(r17, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r18, @ANYBLOB="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"], 0xc8}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000002e00)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000002e40)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r21 = socket$inet_udp(0x2, 0x2, 0x0) close(r21) splice(r20, 0x0, r21, 0x0, 0x10005, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r20, 0x8933, &(0x7f0000002e80)={'batadv0\x00', 0x0}) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket(0x11, 0x2, 0x0) bind(r24, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r24, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r23, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r25, @ANYBLOB="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"], 0xc8}}, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket(0x11, 0x2, 0x0) bind(r27, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r26, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf050a8000fd", @ANYRES32=r28, @ANYBLOB="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"], 0xc8}}, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket(0x11, 0x2, 0x0) bind(r30, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r30, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r31, @ANYBLOB="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"], 0xc8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003200)={'vxcan1\x00', r31}) getpeername$packet(0xffffffffffffffff, &(0x7f00000032c0)={0x11, 0x0, 0x0}, &(0x7f0000003300)=0x14) r34 = socket$nl_route(0x10, 0x3, 0x0) r35 = socket(0x11, 0x2, 0x0) bind(r35, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r35, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r34, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r36, @ANYBLOB="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"], 0xc8}}, 0x0) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket(0x11, 0x2, 0x0) bind(r38, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r38, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r37, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r39, @ANYBLOB="08000800030000000800080004000000140001000000000000000000000000000001000014000100fe80000000000000000000000000002e14000200fe8000000000000000000000000000aa14000200ff020000000000000000000000000001140002002d5a16c966ac744608dc0e673c99a9cf14000100ff0100000000000000000000000000886945b25ccfc080eb98c5e526c30e0114000200ff0200000000000000000000000000010000010000f8920000ff000000b9e8e8eb39bba5b1d33b03209869bab251ff979eed58ab5d1c7c9ba5f0d1afe9e489110d7324f111bcb6e457249c92249979152ef51455f1160175d1af789e64bf6e29b9f13808be2b64abb8f235817f4252bc1eef2c84d0b89241f77692d7af0000000000e88c131d0c3aba61dabfdb7969ebac4b9f166ebfdfdb1dece4dcdd52edfc8ab1ab05451415b1d97ffd5ba3643efaeec30ccb6f739e14d6ccd489aa340476399523b93ffc6563"], 0xc8}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r41 = socket$inet_udp(0x2, 0x2, 0x0) close(r41) splice(r40, 0x0, r41, 0x0, 0x10005, 0x0) getsockopt$inet6_mreq(r40, 0x29, 0x15, &(0x7f00000036c0)={@loopback, 0x0}, &(0x7f0000003700)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000009c40)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000009d40)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000009d80)={@empty, 0x0}, &(0x7f0000009dc0)=0x14) r45 = socket$nl_route(0x10, 0x3, 0x0) r46 = socket(0x11, 0x2, 0x0) bind(r46, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r46, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r45, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r47, @ANYBLOB="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"], 0xc8}}, 0x0) r48 = socket$nl_route(0x10, 0x3, 0x0) r49 = socket(0x11, 0x2, 0x0) bind(r49, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r49, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r48, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r50, @ANYBLOB="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"], 0xc8}}, 0x0) r51 = socket$nl_route(0x10, 0x3, 0x0) r52 = socket(0x10, 0x5, 0x0) bind(r52, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3d36005404b0d6301a4ce875f2e3ff5f1655e340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a090000000000f6ff00"}, 0x80) getsockname$packet(r52, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r51, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001500010029bd7000ffdbdf250a8000fd", @ANYRES32=r53, @ANYBLOB="08000800030000000800080004000000140001000000000000000000000000000001000014000100fe80000000000000000000000000002e14000200fe8000000000000000000000000000aa14000200ff020000000000000000000000000001140002002d5a16c966ac744608dc0e673c99a9cf14000100ff0100000000000000000000000000886945b25ccfc080eb98c5e526c30e0114000200ff0200000000000000000000000000010000010000f8920000ff000000b9e8e8eb39bba5b1d33b03209869bab251ff979eed58ab5d1c7c9ba5f0d1afe9e489110d7324f111bcb6e457249c92249979152ef51455f1160175d1af789e64bf6e29b9f13808be2b64abb8f235817f4252bc1eef2c84d0b89241f77692d7af0000000000e88c131d0c3aba61dabfdb7969ebac4b9f166ebfdfdb1dece4dcdd52edfc8ab1ab05451415b1d97ffd5ba3643efaeec30ccb6f739e14d6ccd489aa340476399523b93ffc6563"], 0xc8}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f000000a540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000a500)={&(0x7f0000009e00)={0x6c8, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x138, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0xfdc9}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r18}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xc44b}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r28}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r32}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r36}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4922}}, {0x8, 0x6, r39}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r42}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r43}}}]}}, {{0x8, 0x1, r44}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r47}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r50}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8736}}, {0x8, 0x6, r53}}}]}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x4008004}, 0x8005) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0044306, 0x0) fcntl$setlease(r3, 0x400, 0x0) [ 2233.645508][ C0] sd 0:0:1:0: [sg0] tag#704 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2233.656510][ C0] sd 0:0:1:0: [sg0] tag#704 CDB: Test Unit Ready [ 2233.663420][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.673196][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.682956][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.692786][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.702554][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.713431][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.719947][T23596] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2233.723206][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.723345][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.732870][T23596] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2233.742478][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.742616][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.781055][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.791120][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.800898][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.810813][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.820738][ C0] sd 0:0:1:0: [sg0] tag#704 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.829706][ C0] sd 0:0:1:0: [sg0] tag#705 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2233.840287][ C0] sd 0:0:1:0: [sg0] tag#705 CDB: Test Unit Ready [ 2233.846964][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.856743][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.866584][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.876342][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.886208][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:06 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 16:10:06 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2233.896106][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.905936][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.915831][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.925657][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.935440][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.945296][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.955070][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.965070][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.975023][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.984887][ C0] sd 0:0:1:0: [sg0] tag#705 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2233.988270][ C1] sd 0:0:1:0: [sg0] tag#713 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2234.004094][ C1] sd 0:0:1:0: [sg0] tag#713 CDB: Test Unit Ready [ 2234.010710][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.020548][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.030545][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.040535][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.050356][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.060191][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.070130][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.080189][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.090409][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.100225][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.110166][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.120075][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.129910][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.139724][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.149549][ C1] sd 0:0:1:0: [sg0] tag#713 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.327944][ T32] audit: type=1400 audit(1583079007.381:108): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=23779 comm="syz-executor.3" [ 2234.383533][ C0] sd 0:0:1:0: [sg0] tag#714 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2234.394241][ C0] sd 0:0:1:0: [sg0] tag#714 CDB: Test Unit Ready [ 2234.400980][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.410921][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.421167][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.431273][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.441169][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.451069][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.461178][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.471014][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.480798][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.490660][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.500462][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.510303][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.520082][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.529923][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2234.539706][ C0] sd 0:0:1:0: [sg0] tag#714 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:08 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:08 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0xff1c) r2 = socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000ff07000000000400000000000000000000000000000000000000001f0000000000000000000000000053e7000000000000000000000000000000000000000000a61c65ecd09e9781692e0211e57c78f2d238326a7f90da2613dc9cdc7ed505dda39fca9ae9f30879424cab073c44e20f2948a5b952c335b786339f0bdddd5264eb8027fdff361258637ceeb700"/180], 0x68) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r6 = socket(0x80000000000000a, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x2, 0xffffffff, 0x9, 0xdfc}}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000000)=""/32) 16:10:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 16:10:08 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:08 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2235.317633][ C1] sd 0:0:1:0: [sg0] tag#715 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2235.328822][ C1] sd 0:0:1:0: [sg0] tag#715 CDB: Test Unit Ready [ 2235.335571][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.345389][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.355352][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.365228][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.375230][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.385401][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.395579][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.405559][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.415387][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.425205][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.435018][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.444839][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.454801][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:08 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2235.464823][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.465736][ C0] sd 0:0:1:0: [sg0] tag#716 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2235.474717][ C1] sd 0:0:1:0: [sg0] tag#715 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.485134][ C0] sd 0:0:1:0: [sg0] tag#716 CDB: Test Unit Ready [ 2235.500402][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.510527][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.520459][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.530291][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.540274][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.550239][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.560291][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.570100][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.580102][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.590045][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.599976][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.609795][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.619797][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.629571][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.639404][ C0] sd 0:0:1:0: [sg0] tag#716 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2235.650395][ T32] audit: type=1400 audit(1583079008.561:109): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=23999 comm="syz-executor.3" 16:10:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 16:10:09 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2236.007309][ C1] sd 0:0:1:0: [sg0] tag#717 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2236.018507][ C1] sd 0:0:1:0: [sg0] tag#717 CDB: Test Unit Ready [ 2236.025486][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.035556][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.045548][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.055671][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.065863][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.075734][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.085647][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.095489][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.105432][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.115431][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.125327][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.135198][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.145338][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.155251][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.165113][ C1] sd 0:0:1:0: [sg0] tag#717 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.320648][ C1] sd 0:0:1:0: [sg0] tag#719 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2236.331396][ C1] sd 0:0:1:0: [sg0] tag#719 CDB: Test Unit Ready [ 2236.338130][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.347929][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.348318][ T32] audit: type=1400 audit(1583079009.401:110): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=24357 comm="syz-executor.1" [ 2236.358123][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.386696][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.396496][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.400836][ C0] sd 0:0:1:0: [sg0] tag#718 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2236.406441][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.416837][ C0] sd 0:0:1:0: [sg0] tag#718 CDB: Test Unit Ready [ 2236.426467][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.432942][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.442611][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.452241][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.461884][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.471587][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.481121][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.490811][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.500494][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.510581][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.520215][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.529894][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.539569][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.549229][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.558861][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.568473][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.578124][ C1] sd 0:0:1:0: [sg0] tag#719 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.587788][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.606070][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.616028][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.625806][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.635698][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.645617][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2236.655457][ C0] sd 0:0:1:0: [sg0] tag#718 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:09 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 16:10:09 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 16:10:09 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2237.025031][ T32] audit: type=1400 audit(1583079010.081:111): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=24558 comm="syz-executor.3" 16:10:10 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:10 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 2237.378350][ T32] audit: type=1400 audit(1583079010.431:112): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=24688 comm="syz-executor.2" 16:10:10 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 2237.490684][ C0] sd 0:0:1:0: [sg0] tag#720 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2237.501235][ C0] sd 0:0:1:0: [sg0] tag#720 CDB: Test Unit Ready [ 2237.507946][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.517717][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.527471][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.537238][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.546999][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.556789][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.566580][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.576367][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.586130][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.595887][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.605669][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.615413][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.626492][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.636262][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2237.646017][ C0] sd 0:0:1:0: [sg0] tag#720 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:10 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:11 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2238.265352][ T32] audit: type=1400 audit(1583079011.321:113): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=24819 comm="syz-executor.3" 16:10:11 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:11 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:11 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:11 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2238.903174][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 2238.903301][ C1] sd 0:0:1:0: [sg0] tag#723 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2238.920742][ C1] sd 0:0:1:0: [sg0] tag#723 CDB: Test Unit Ready [ 2238.927460][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2238.937269][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2238.947945][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2238.957780][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2238.967688][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2238.977505][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2238.987470][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2238.997265][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.007120][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.017030][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.026920][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.036834][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.046723][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.056549][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.067014][ C1] sd 0:0:1:0: [sg0] tag#723 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:12 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:12 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2239.236979][ C0] sd 0:0:1:0: [sg0] tag#724 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2239.247542][ C0] sd 0:0:1:0: [sg0] tag#724 CDB: Test Unit Ready [ 2239.254373][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.264136][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.273892][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:12 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2239.283663][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.293423][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.303187][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.312947][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.322715][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.333356][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.343126][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.352894][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.362660][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.372406][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.382366][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.392120][ C0] sd 0:0:1:0: [sg0] tag#724 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.418751][ T32] audit: type=1400 audit(1583079012.471:114): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=24989 comm="syz-executor.3" [ 2239.845287][ C0] sd 0:0:1:0: [sg0] tag#725 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2239.855875][ C0] sd 0:0:1:0: [sg0] tag#725 CDB: Test Unit Ready [ 2239.862578][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.872367][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.882144][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.891948][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.901714][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.911490][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.921269][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.931130][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.940896][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.950675][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.961553][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.971330][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.981110][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2239.990907][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.000735][ C0] sd 0:0:1:0: [sg0] tag#725 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:13 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:13 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:13 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2240.550450][ C1] sd 0:0:1:0: [sg0] tag#726 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2240.561181][ C1] sd 0:0:1:0: [sg0] tag#726 CDB: Test Unit Ready [ 2240.567905][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.577845][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.587709][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.597586][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.607383][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.617174][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.626991][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.636796][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.646590][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.656387][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.662453][ C0] sd 0:0:1:0: [sg0] tag#727 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2240.666511][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.676798][ C0] sd 0:0:1:0: [sg0] tag#727 CDB: Test Unit Ready [ 2240.686419][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.692891][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.702556][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.712175][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.721686][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.731308][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:13 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:13 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2240.740926][ C1] sd 0:0:1:0: [sg0] tag#726 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.750554][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.768932][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.778746][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.788603][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.798398][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.808222][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.818053][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.827834][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.837638][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.847387][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.857206][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2240.866981][ C0] sd 0:0:1:0: [sg0] tag#727 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:14 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2241.039302][ C1] sd 0:0:1:0: [sg0] tag#728 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2241.050007][ C1] sd 0:0:1:0: [sg0] tag#728 CDB: Test Unit Ready [ 2241.056733][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.059643][ C0] sd 0:0:1:0: [sg0] tag#729 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2241.066510][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.076921][ C0] sd 0:0:1:0: [sg0] tag#729 CDB: Test Unit Ready [ 2241.086754][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.093211][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.102905][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.112596][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.122456][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.132214][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.142010][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.151537][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.161209][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.170995][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.180732][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.190399][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.200070][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.209721][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.219392][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.229065][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.238750][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.248380][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.258194][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.267870][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.277632][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.287306][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.296960][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.306639][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.316315][ C1] sd 0:0:1:0: [sg0] tag#728 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.325977][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.344355][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2241.354225][ C0] sd 0:0:1:0: [sg0] tag#729 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:14 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 16:10:15 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:15 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:15 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2242.242963][ C0] sd 0:0:1:0: [sg0] tag#731 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2242.253517][ C0] sd 0:0:1:0: [sg0] tag#731 CDB: Test Unit Ready [ 2242.260077][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.270010][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.280065][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.289902][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.299813][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.306098][ C1] sd 0:0:1:0: [sg0] tag#730 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2242.309588][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.320078][ C1] sd 0:0:1:0: [sg0] tag#730 CDB: Test Unit Ready [ 2242.329777][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.336307][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.345909][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.355609][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.365309][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.375002][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.384670][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.394336][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.403991][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.413706][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.423511][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.433194][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.442870][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.452511][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.462197][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.471901][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.481364][ C0] sd 0:0:1:0: [sg0] tag#731 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.490959][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.509283][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.519152][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.528953][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:15 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2242.538801][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.548725][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.558536][ C1] sd 0:0:1:0: [sg0] tag#730 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2242.619962][ T32] audit: type=1400 audit(1583079015.671:115): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=25820 comm="syz-executor.3" [ 2242.842455][ T32] audit: type=1400 audit(1583079015.891:116): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=25912 comm="syz-executor.5" 16:10:15 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 2243.002041][ C1] sd 0:0:1:0: [sg0] tag#732 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2243.012653][ C1] sd 0:0:1:0: [sg0] tag#732 CDB: Test Unit Ready [ 2243.019209][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.029086][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.038900][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.048816][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.058629][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.068448][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.078352][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.088283][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.099059][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.108876][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.118690][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.128629][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.138457][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.148295][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2243.158109][ C1] sd 0:0:1:0: [sg0] tag#732 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:16 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:16 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030800000000a9030000000000000000000008000100575aff9fef2a723dbc6d39163619f0c944ebf9ae20f36b67c95017fa9c7fdd6856fe0e51c5c1300ab4381939efffffff3cc10ed9abb13edfc987222755fc57cc3eee73d76ea549e20122583c013c22667ca11f16e835200087c76c3dc2c7aee60d841b557422a7091f59a30c760800000000089f526f98bbb3fa9acc000000e78566ad0100000000000000ca92c727e13384adbb22f5b63e2b08b2e77f67bc3297fa2ed7b022b1299b9cc7d81354b3db7e3c623f11562ba1bd253034b4491cefa446431a759aaca4a44081b17d74f94609a0e788bdc9576987f0e0a53b080a5325ce37b8aa39e8c7deab3538286c047717018aab6283476e57cd43e53662a8df25869deb3bc9cf3ec13c0088150e88c227c4ae89f5ead7f16068ec4172a323f3568e878a8eabbce988c0d95e7fd7d4b165292d46d1cbde95bb456f65de439dcbc533ddbc4bd9a3f0cf0e3285d497a3e09e2bd563ab7f235d32d119019b1b8020ae591b8bd693002ff7d422aa011dd50be804000000ab158f393bad52d84f148bbb6f0090f0850fc0a47e97b3fbf8a554666d5119bdb1348b171b5b4d25de0073e33ce4bb7f1d536e4c48a6ff5413b79155083f768ae5dbdb985571b3c26b8ca5fa49a794e16a850401e956dff3068af82eaed0927f01d45ff96ff9c9c8409491ed0005626c81d8cda25c5dc6a987ef8964a6cb75b0feffffffffffffff00000000000000000000000000000000000000000000000000bddf1a7597f215c31a4f52300d31c17717f7d825d10c08fddd297ca0e624c5a9d3e47a8d4b519e0a7109d6f6de292257e9a1d9f984c3e867012f499f9a0773b05489aa69bb2ef800bd1f76d8c356763bb32df34c0aa05b9606937e929a69c069795454317cd8ff9faf079b4cf5e2e35a6a9a8524febf1ee51d50744767c21904708e098c1b701e074698f25b7a0cf06ec27ac99acd7fbc053d5b3e0b34d4927a8d9e1e5f7bdf01dd9d7eb4f010549aed42a8b60383178d5d58556762f0f1a8b3394a5bd06816f70314f6acadd9dbbdf839bae0000000000000000000000000000000000000000000000000000000000000f279", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 16:10:16 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 16:10:17 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:17 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2244.147919][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 2244.148050][ C1] sd 0:0:1:0: [sg0] tag#737 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2244.165503][ C1] sd 0:0:1:0: [sg0] tag#737 CDB: Test Unit Ready [ 2244.172272][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.182085][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.191968][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.201650][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.211482][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.221290][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.231055][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.240873][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.250700][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.260647][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.270494][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.280431][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.290263][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.300096][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2244.310013][ C1] sd 0:0:1:0: [sg0] tag#737 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:17 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:17 executing program 1: getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xf000000, 0xff, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0001, 0xffff, [], @string=&(0x7f0000000000)=0x8}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) write$dsp(0xffffffffffffffff, 0x0, 0x0) unshare(0x60020000) [ 2244.797205][ C0] not chained 680000 origins [ 2244.801777][ C0] CPU: 0 PID: 16502 Comm: kworker/u4:15 Not tainted 5.6.0-rc2-syzkaller #0 [ 2244.801777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2244.801777][ C0] Workqueue: krdsd rds_connect_worker [ 2244.822017][ C0] Call Trace: [ 2244.822017][ C0] [ 2244.822017][ C0] dump_stack+0x1c9/0x220 [ 2244.822017][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 2244.822017][ C0] ? should_fail+0x72/0x9e0 [ 2244.822017][ C0] ? ret_from_fork+0x35/0x40 [ 2244.822017][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2244.822017][ C0] ? arch_stack_walk+0x34c/0x3e0 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2244.822017][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 2244.822017][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2244.822017][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 2244.822017][ C0] ? tcp_parse_options+0x1ada/0x1b90 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_conn_request+0x174b/0x4d10 [ 2244.822017][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2244.822017][ C0] ? cache_from_obj+0x2d7/0x6b0 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] ? inet6_sk_rx_dst_set+0x3d0/0x3d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2244.822017][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ? tcp_filter+0xf0/0xf0 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 2244.822017][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] ? ip_rcv_core+0x1270/0x1270 [ 2244.822017][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 2244.822017][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] ? net_tx_action+0xc30/0xc30 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] do_softirq_own_stack+0x49/0x80 [ 2244.822017][ C0] [ 2244.822017][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 2244.822017][ C0] local_bh_enable+0x36/0x40 [ 2244.822017][ C0] ip_finish_output2+0x2115/0x2610 [ 2244.822017][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 2244.822017][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 2244.822017][ C0] __ip_finish_output+0xaa7/0xd80 [ 2244.822017][ C0] ip_finish_output+0x166/0x410 [ 2244.822017][ C0] ip_output+0x593/0x680 [ 2244.822017][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 2244.822017][ C0] ? ip_finish_output+0x410/0x410 [ 2244.822017][ C0] __ip_queue_xmit+0x1b5c/0x21a0 [ 2244.822017][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] ip_queue_xmit+0xcc/0xf0 [ 2244.822017][ C0] ? tcp_v4_fill_cb+0x580/0x580 [ 2244.822017][ C0] __tcp_transmit_skb+0x439c/0x6090 [ 2244.822017][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2244.822017][ C0] tcp_connect+0x4337/0x6920 [ 2244.822017][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] tcp_v4_connect+0x21fd/0x2370 [ 2244.822017][ C0] ? tcp_twsk_unique+0xba0/0xba0 [ 2244.822017][ C0] __inet_stream_connect+0x2fb/0x1340 [ 2244.822017][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] inet_stream_connect+0x101/0x180 [ 2244.822017][ C0] ? __inet_stream_connect+0x1340/0x1340 [ 2244.822017][ C0] rds_tcp_conn_path_connect+0x8a7/0xb80 [ 2244.822017][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 2244.822017][ C0] ? rds_tcp_state_change+0x390/0x390 [ 2244.822017][ C0] rds_connect_worker+0x2a6/0x470 [ 2244.822017][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2244.822017][ C0] ? rds_addr_cmp+0x200/0x200 [ 2244.822017][ C0] process_one_work+0x1555/0x1f40 [ 2244.822017][ C0] worker_thread+0xef6/0x2450 [ 2244.822017][ C0] kthread+0x4b5/0x4f0 [ 2244.822017][ C0] ? process_one_work+0x1f40/0x1f40 [ 2244.822017][ C0] ? kthread_blkcg+0xf0/0xf0 [ 2244.822017][ C0] ret_from_fork+0x35/0x40 [ 2244.822017][ C0] Uninit was stored to memory at: [ 2244.822017][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_conn_request+0x1781/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] [ 2244.822017][ C0] Uninit was stored to memory at: [ 2244.822017][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 2244.822017][ C0] tcp_conn_request+0x33d7/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] [ 2244.822017][ C0] Uninit was stored to memory at: [ 2244.822017][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_conn_request+0x1781/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] [ 2244.822017][ C0] Uninit was stored to memory at: [ 2244.822017][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 2244.822017][ C0] tcp_conn_request+0x33d7/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] [ 2244.822017][ C0] Uninit was stored to memory at: [ 2244.822017][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_conn_request+0x1781/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] [ 2244.822017][ C0] Uninit was stored to memory at: [ 2244.822017][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_openreq_init_rwin+0xc22/0xc80 [ 2244.822017][ C0] tcp_conn_request+0x33d7/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] [ 2244.822017][ C0] Uninit was stored to memory at: [ 2244.822017][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 2244.822017][ C0] __msan_chain_origin+0x50/0x90 [ 2244.822017][ C0] tcp_conn_request+0x1781/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_v6_conn_request+0xb5/0x2d0 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_rcv+0x6cf/0x750 [ 2244.822017][ C0] process_backlog+0xf0b/0x1410 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d [ 2244.822017][ C0] [ 2244.822017][ C0] Uninit was created at: [ 2244.822017][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 2244.822017][ C0] kmsan_alloc_page+0x12a/0x310 [ 2244.822017][ C0] __alloc_pages_nodemask+0x5712/0x5e80 [ 2244.822017][ C0] alloc_pages_current+0x67d/0x990 [ 2244.822017][ C0] alloc_slab_page+0x111/0x12f0 [ 2244.822017][ C0] new_slab+0x2bc/0x1130 [ 2244.822017][ C0] ___slab_alloc+0x1533/0x1f30 [ 2244.822017][ C0] kmem_cache_alloc+0xb23/0xd70 [ 2244.822017][ C0] inet_reqsk_alloc+0xac/0x830 [ 2244.822017][ C0] tcp_conn_request+0x753/0x4d10 [ 2244.822017][ C0] tcp_v4_conn_request+0x19b/0x240 [ 2244.822017][ C0] tcp_rcv_state_process+0x26b/0x7140 [ 2244.822017][ C0] tcp_v4_do_rcv+0xb0f/0xd70 [ 2244.822017][ C0] tcp_v4_rcv+0x3f39/0x4d00 [ 2244.822017][ C0] ip_protocol_deliver_rcu+0x4b7/0xbc0 [ 2244.822017][ C0] ip_local_deliver+0x62a/0x7c0 [ 2244.822017][ C0] ip_sublist_rcv+0x11fa/0x13c0 [ 2244.822017][ C0] ip_list_rcv+0x8eb/0x950 [ 2244.822017][ C0] __netif_receive_skb_list_core+0x1311/0x1380 [ 2244.822017][ C0] netif_receive_skb_list_internal+0xf62/0x1620 [ 2244.822017][ C0] napi_complete_done+0x2ef/0xb60 [ 2244.822017][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 2244.822017][ C0] virtnet_poll+0x1468/0x19f0 [ 2244.822017][ C0] net_rx_action+0x786/0x1aa0 [ 2244.822017][ C0] __do_softirq+0x311/0x83d 16:10:19 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:19 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2246.549281][ C0] sd 0:0:1:0: [sg0] tag#738 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2246.559843][ C0] sd 0:0:1:0: [sg0] tag#738 CDB: Test Unit Ready [ 2246.566548][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.576331][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.586147][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.595960][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.605762][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.615562][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.625374][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.635137][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:19 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2246.644882][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.654642][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.664406][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.674243][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.683996][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.693750][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.703518][ C0] sd 0:0:1:0: [sg0] tag#738 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:19 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:19 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2246.952676][ C0] sd 0:0:1:0: [sg0] tag#739 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2246.963418][ C0] sd 0:0:1:0: [sg0] tag#739 CDB: Test Unit Ready [ 2246.969968][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.979801][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.989671][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2246.999536][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.009321][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.019443][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.029222][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.038998][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.048807][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.058867][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.068646][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.078488][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.088269][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:20 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2247.098135][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.108365][ C0] sd 0:0:1:0: [sg0] tag#739 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:20 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2247.284612][ T32] audit: type=1400 audit(1583079020.341:117): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=26810 comm="syz-executor.2" [ 2247.412878][ C0] sd 0:0:1:0: [sg0] tag#740 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2247.423524][ C0] sd 0:0:1:0: [sg0] tag#740 CDB: Test Unit Ready [ 2247.430057][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.439996][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.449791][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.459604][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.469364][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.479204][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.490549][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.500427][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.510181][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.520016][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.529789][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.539742][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.550013][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.560240][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.570002][ C0] sd 0:0:1:0: [sg0] tag#740 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2247.605067][T26589] IPVS: ftp: loaded support on port[0] = 21 [ 2247.735385][ T32] audit: type=1400 audit(1583079020.791:118): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=26818 comm="syz-executor.3" 16:10:21 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2248.051061][ C0] sd 0:0:1:0: [sg0] tag#741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2248.061709][ C0] sd 0:0:1:0: [sg0] tag#741 CDB: Test Unit Ready [ 2248.068394][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.078161][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.087932][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.097732][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.107603][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.117367][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.127134][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.136929][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.146754][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.156564][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.166342][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.176121][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.185891][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.195820][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.209239][ C0] sd 0:0:1:0: [sg0] tag#741 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:21 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:21 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2248.724836][ C0] sd 0:0:1:0: [sg0] tag#742 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2248.735527][ C0] sd 0:0:1:0: [sg0] tag#742 CDB: Test Unit Ready [ 2248.742229][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.751994][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.761908][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.771631][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.781425][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.791247][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.801048][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.810827][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.820614][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.830389][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.840169][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.850116][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.859880][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:21 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2248.869662][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.879443][ C0] sd 0:0:1:0: [sg0] tag#742 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2248.969507][ T32] audit: type=1400 audit(1583079022.021:119): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=27073 comm="syz-executor.5" 16:10:22 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) dup3(r0, r1, 0x0) 16:10:22 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:22 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2249.411919][ C0] sd 0:0:1:0: [sg0] tag#746 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2249.422479][ C0] sd 0:0:1:0: [sg0] tag#746 CDB: Test Unit Ready [ 2249.429023][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.438853][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.448622][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.458521][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.468320][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.478088][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.487865][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.497633][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.507421][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.517292][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.527094][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.536975][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.546848][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.556738][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2249.566751][ C0] sd 0:0:1:0: [sg0] tag#746 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:22 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2249.703806][T16502] tipc: TX() has been purged, node left! 16:10:23 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:23 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:23 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2250.284143][ C1] sd 0:0:1:0: [sg0] tag#747 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.294759][ C1] sd 0:0:1:0: [sg0] tag#747 CDB: Test Unit Ready [ 2250.301308][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.311313][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.321156][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.331052][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.340974][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.350846][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.360653][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.370558][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.380741][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.390703][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.400600][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.410576][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.420426][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:23 executing program 1: [ 2250.430218][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.439996][ C1] sd 0:0:1:0: [sg0] tag#747 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.455408][ T32] audit: type=1400 audit(1583079023.511:120): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=27519 comm="syz-executor.3" [ 2250.540201][ T32] audit: type=1400 audit(1583079023.581:121): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=27571 comm="syz-executor.2" [ 2250.771248][ C1] sd 0:0:1:0: [sg0] tag#748 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.781938][ C1] sd 0:0:1:0: [sg0] tag#748 CDB: Test Unit Ready [ 2250.788577][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.798438][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.808422][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.818261][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.828101][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.838263][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.848092][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.857888][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.867703][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.877613][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.887631][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.897444][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.907434][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:24 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2250.917256][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2250.927125][ C1] sd 0:0:1:0: [sg0] tag#748 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:24 executing program 1: 16:10:25 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:25 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:25 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:25 executing program 1: 16:10:25 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2252.298190][ T32] audit: type=1400 audit(1583079025.351:122): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=27912 comm="syz-executor.3" [ 2252.341394][ C1] sd 0:0:1:0: [sg0] tag#749 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2252.352176][ C1] sd 0:0:1:0: [sg0] tag#749 CDB: Test Unit Ready [ 2252.358722][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.368587][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.378423][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.388315][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.398141][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.407955][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.417779][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.427625][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.437469][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.447293][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.457261][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.467065][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.476875][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:25 executing program 1: [ 2252.486710][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2252.496548][ C1] sd 0:0:1:0: [sg0] tag#749 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:25 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:25 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:25 executing program 1: 16:10:26 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2253.092962][ C1] sd 0:0:1:0: [sg0] tag#750 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2253.103723][ C1] sd 0:0:1:0: [sg0] tag#750 CDB: Test Unit Ready [ 2253.110371][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.120245][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.130058][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.139863][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.149674][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.159510][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.169550][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.179374][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) [ 2253.189316][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.199135][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.208940][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.218787][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.228707][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.238569][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.248425][ C1] sd 0:0:1:0: [sg0] tag#750 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:26 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:26 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:26 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2253.814434][ T32] audit: type=1400 audit(1583079026.871:123): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=28405 comm="syz-executor.5" [ 2253.862681][ C1] sd 0:0:1:0: [sg0] tag#751 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2253.873303][ C1] sd 0:0:1:0: [sg0] tag#751 CDB: Test Unit Ready [ 2253.879990][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.889892][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.899788][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.909640][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.919444][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.929446][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.939281][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.949168][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.959094][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.969143][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.978969][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.988856][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2253.998674][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2254.008541][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2254.018723][ C1] sd 0:0:1:0: [sg0] tag#751 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:28 executing program 1: 16:10:28 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:28 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:28 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:28 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2255.301850][ C0] sd 0:0:1:0: [sg0] tag#753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2255.312587][ C0] sd 0:0:1:0: [sg0] tag#753 CDB: Test Unit Ready [ 2255.319142][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.328956][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.338722][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.348557][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.358426][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.368221][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.378041][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.387900][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.397680][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.407444][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.417366][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.428086][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.438556][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.448771][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2255.458564][ C0] sd 0:0:1:0: [sg0] tag#753 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:28 executing program 1: [ 2255.499671][ T32] audit: type=1400 audit(1583079028.551:124): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=28563 comm="syz-executor.3" 16:10:28 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:28 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:28 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:28 executing program 1: [ 2255.977818][ C1] sd 0:0:1:0: [sg0] tag#754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2255.988428][ C1] sd 0:0:1:0: [sg0] tag#754 CDB: Test Unit Ready [ 2255.995166][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.005037][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.014849][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.024732][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.034538][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.044341][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.054161][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.063952][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.073757][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.083566][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.093354][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.103153][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.112988][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.122798][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2256.132598][ C1] sd 0:0:1:0: [sg0] tag#754 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:29 executing program 1: 16:10:29 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:29 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:30 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:30 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:30 executing program 1: 16:10:30 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:30 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:30 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2257.810917][ C1] sd 0:0:1:0: [sg0] tag#755 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2257.821568][ C1] sd 0:0:1:0: [sg0] tag#755 CDB: Test Unit Ready [ 2257.828324][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.833645][ C0] sd 0:0:1:0: [sg0] tag#756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2257.838141][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.848437][ C0] sd 0:0:1:0: [sg0] tag#756 CDB: Test Unit Ready [ 2257.858249][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.864620][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.874201][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.883797][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.893406][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.903029][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.912679][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.922391][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.932020][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.941562][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.951224][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.960854][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.970561][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.980182][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.989817][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2257.999442][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.009071][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.018692][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.028330][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.037942][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.047571][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.057176][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.066854][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.076534][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.086287][ C1] sd 0:0:1:0: [sg0] tag#755 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.096059][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.114284][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2258.124068][ C0] sd 0:0:1:0: [sg0] tag#756 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:31 executing program 1: [ 2258.202324][ T32] audit: type=1400 audit(1583079031.251:125): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=29010 comm="syz-executor.3" 16:10:31 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000070601600000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a300000000005000500020000000500010006000000"], 0x48}}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 16:10:31 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2259.042223][ C1] sd 0:0:1:0: [sg0] tag#757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2259.052826][ C1] sd 0:0:1:0: [sg0] tag#757 CDB: Test Unit Ready [ 2259.059370][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.069218][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.079014][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.088874][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.098693][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.108481][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.118272][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.128081][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.137936][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.147759][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.157578][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.167408][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.177219][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16:10:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x0, 0x0) close(r0) syz_genetlink_get_family_id$batadv(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000003a40)={0xa, 0xffff, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) [ 2259.187011][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2259.196817][ C1] sd 0:0:1:0: [sg0] tag#757 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 16:10:32 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:33 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:33 executing program 0: socket$key(0xf, 0x3, 0x2) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb67b9f207c804a00d0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 16:10:33 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040), 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="8c2fb074d782b99a4ebb28bd49ca9d8f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8f45aa7708f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d92b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefd6c32891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404000000", 0xc9}], 0x1}}], 0x1, 0x1) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000c80)=""/59, 0x3b}, {&(0x7f0000000bc0)=""/177, 0xb1}], 0x2}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="7f454c4600000000000000000020000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000800"/201], 0xc9) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 16:10:33 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:33 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) [ 2260.409348][ C1] sd 0:0:1:0: [sg0] tag#759 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2260.420061][ C1] sd 0:0:1:0: [sg0] tag#759 CDB: Test Unit Ready [ 2260.426777][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.438197][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.448160][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.455149][ C0] sd 0:0:1:0: [sg0] tag#760 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2260.458016][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.468379][ C0] sd 0:0:1:0: [sg0] tag#760 CDB: Test Unit Ready [ 2260.477941][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.484660][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.494406][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.504144][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.513799][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.523523][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.533556][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.543175][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.553052][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.562703][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.572407][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.582055][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.591616][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.601286][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.610948][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.620685][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.630389][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.640066][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.649692][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.662175][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.671890][ C1] sd 0:0:1:0: [sg0] tag#759 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.681519][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.699783][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.709818][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.719765][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.729638][ C0] sd 0:0:1:0: [sg0] tag#760 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2260.825950][ T32] audit: type=1400 audit(1583079033.881:126): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=29647 comm="syz-executor.3" 16:10:34 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040), 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:34 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040), 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:34 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:10:34 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) fstat(r1, &(0x7f0000000240)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:34 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46084}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa344175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f35ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7f0096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e60d1bf25e627da1af58c02170b852752b790d720dbf70212824bc9849b32b67912616889e8fe6e87920447d4eac8b8554b5"], 0xed) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x3c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x529a00, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '::\n'}, 0xd) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000004c0)) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(r3, &(0x7f0000000080)='attr/fscreate\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, r2, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x6}) 16:10:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff0}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) [ 2261.848927][ C0] sd 0:0:1:0: [sg0] tag#761 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2261.859617][ C0] sd 0:0:1:0: [sg0] tag#761 CDB: Test Unit Ready [ 2261.866437][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.877293][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.887139][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.896985][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.906810][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.916579][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.926439][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.936212][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.946071][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.955855][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.965810][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.975578][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.985402][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2261.995181][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.005022][ C0] sd 0:0:1:0: [sg0] tag#761 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.100549][ T32] audit: type=1400 audit(1583079035.151:127): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A3A0A636B pid=30183 comm="syz-executor.2" [ 2262.209555][T30238] ===================================================== [ 2262.211781][T30238] BUG: KMSAN: uninit-value in ethnl_update_bitset32+0x2c85/0x3860 [ 2262.211781][T30238] CPU: 1 PID: 30238 Comm: syz-executor.1 Not tainted 5.6.0-rc2-syzkaller #0 [ 2262.211781][T30238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2262.211781][T30238] Call Trace: [ 2262.211781][T30238] dump_stack+0x1c9/0x220 [ 2262.211781][T30238] kmsan_report+0xf7/0x1e0 [ 2262.211781][T30238] __msan_warning+0x58/0xa0 [ 2262.211781][T30238] ethnl_update_bitset32+0x2c85/0x3860 [ 2262.211781][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.211781][T30238] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 2262.211781][T30238] ? kmsan_memcpy_metadata+0xb/0x10 [ 2262.211781][T30238] ? __msan_memcpy+0x43/0x50 [ 2262.211781][T30238] ethnl_update_bitset+0x11c/0x130 [ 2262.211781][T30238] ethnl_set_linkmodes+0x9f9/0x1430 [ 2262.211781][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.211781][T30238] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2262.211781][T30238] ? linkmodes_fill_reply+0x5c0/0x5c0 [ 2262.211781][T30238] genl_rcv_msg+0x205e/0x2460 [ 2262.211781][T30238] netlink_rcv_skb+0x451/0x650 [ 2262.211781][T30238] ? genl_unbind+0x380/0x380 [ 2262.211781][T30238] genl_rcv+0x63/0x80 [ 2262.211781][T30238] netlink_unicast+0xf9e/0x1100 [ 2262.211781][T30238] ? genl_pernet_exit+0x90/0x90 [ 2262.343072][T30238] netlink_sendmsg+0x1246/0x14d0 [ 2262.343072][T30238] ? netlink_getsockopt+0x1440/0x1440 [ 2262.343072][T30238] ____sys_sendmsg+0x12b6/0x1350 [ 2262.343072][T30238] __sys_sendmsg+0x451/0x5f0 [ 2262.343072][T30238] ? kmsan_copy_to_user+0x81/0x90 [ 2262.343072][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.343072][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.343072][T30238] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2262.343072][T30238] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2262.343072][T30238] ? prepare_exit_to_usermode+0x1ca/0x520 [ 2262.343072][T30238] __se_sys_sendmsg+0x97/0xb0 [ 2262.343072][T30238] __x64_sys_sendmsg+0x4a/0x70 [ 2262.343072][T30238] do_syscall_64+0xb8/0x160 [ 2262.343072][T30238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2262.343072][T30238] RIP: 0033:0x45c479 [ 2262.343072][T30238] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2262.343072][T30238] RSP: 002b:00007ff426560c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2262.343072][T30238] RAX: ffffffffffffffda RBX: 00007ff4265616d4 RCX: 000000000045c479 [ 2262.343072][T30238] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2262.462816][ C0] sd 0:0:1:0: [sg0] tag#762 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2262.343072][T30238] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2262.475636][ C0] sd 0:0:1:0: [sg0] tag#762 CDB: Test Unit Ready [ 2262.343072][T30238] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2262.343072][T30238] R13: 0000000000000904 R14: 00000000004d4ff0 R15: 000000000076bf2c [ 2262.343072][T30238] [ 2262.343072][T30238] Uninit was created at: [ 2262.343072][T30238] kmsan_internal_poison_shadow+0x66/0xd0 [ 2262.483485][T30238] kmsan_slab_alloc+0x8a/0xe0 [ 2262.483493][T30238] __kmalloc_node_track_caller+0xb40/0x1200 [ 2262.483493][T30238] __alloc_skb+0x2fd/0xac0 [ 2262.483493][T30238] netlink_sendmsg+0x7d3/0x14d0 [ 2262.483493][T30238] ____sys_sendmsg+0x12b6/0x1350 [ 2262.483493][T30238] __sys_sendmsg+0x451/0x5f0 [ 2262.483493][T30238] __se_sys_sendmsg+0x97/0xb0 [ 2262.483493][T30238] __x64_sys_sendmsg+0x4a/0x70 [ 2262.483493][T30238] do_syscall_64+0xb8/0x160 [ 2262.483493][T30238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2262.483493][T30238] ===================================================== [ 2262.490116][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] Disabling lock debugging due to kernel taint [ 2262.483493][T30238] Kernel panic - not syncing: panic_on_warn set ... [ 2262.483493][T30238] CPU: 1 PID: 30238 Comm: syz-executor.1 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 2262.483493][T30238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2262.483493][T30238] Call Trace: [ 2262.483493][T30238] dump_stack+0x1c9/0x220 [ 2262.483493][T30238] panic+0x3d5/0xc3e [ 2262.483493][T30238] kmsan_report+0x1df/0x1e0 [ 2262.506494][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] __msan_warning+0x58/0xa0 [ 2262.513101][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ethnl_update_bitset32+0x2c85/0x3860 [ 2262.523496][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.533933][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 2262.543780][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ? kmsan_memcpy_metadata+0xb/0x10 [ 2262.553068][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ? __msan_memcpy+0x43/0x50 [ 2262.562360][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ethnl_update_bitset+0x11c/0x130 [ 2262.575563][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ethnl_set_linkmodes+0x9f9/0x1430 [ 2262.483493][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.483493][T30238] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2262.483493][T30238] ? linkmodes_fill_reply+0x5c0/0x5c0 [ 2262.483493][T30238] genl_rcv_msg+0x205e/0x2460 [ 2262.591266][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] netlink_rcv_skb+0x451/0x650 [ 2262.483493][T30238] ? genl_unbind+0x380/0x380 [ 2262.483493][T30238] genl_rcv+0x63/0x80 [ 2262.483493][T30238] netlink_unicast+0xf9e/0x1100 [ 2262.483493][T30238] ? genl_pernet_exit+0x90/0x90 [ 2262.608205][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] netlink_sendmsg+0x1246/0x14d0 [ 2262.483493][T30238] ? netlink_getsockopt+0x1440/0x1440 [ 2262.483493][T30238] ____sys_sendmsg+0x12b6/0x1350 [ 2262.483493][T30238] __sys_sendmsg+0x451/0x5f0 [ 2262.621561][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] ? kmsan_copy_to_user+0x81/0x90 [ 2262.483493][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.483493][T30238] ? kmsan_get_metadata+0x11d/0x180 [ 2262.483493][T30238] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2262.483493][T30238] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2262.483493][T30238] ? prepare_exit_to_usermode+0x1ca/0x520 [ 2262.629938][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] __se_sys_sendmsg+0x97/0xb0 [ 2262.483493][T30238] __x64_sys_sendmsg+0x4a/0x70 [ 2262.483493][T30238] do_syscall_64+0xb8/0x160 [ 2262.483493][T30238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2262.483493][T30238] RIP: 0033:0x45c479 [ 2262.644131][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2262.658118][ C0] sd 0:0:1:0: [sg0] tag#762 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2262.483493][T30238] RSP: 002b:00007ff426560c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2262.483493][T30238] RAX: ffffffffffffffda RBX: 00007ff4265616d4 RCX: 000000000045c479 [ 2262.483493][T30238] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2262.483493][T30238] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2262.483493][T30238] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2262.483493][T30238] R13: 0000000000000904 R14: 00000000004d4ff0 R15: 000000000076bf2c [ 2262.483493][T30238] Kernel Offset: 0x8000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 2262.483493][T30238] Rebooting in 86400 seconds..